engineering
Posted YesterdaySenior Software Engineer (Guarded OS)
at Chainguard
United StatesRemote
Responsibilities
- Operate and develop the Elastic Build service, our Kubernetes + GitHub + Cloud Run pipeline that converts package specifications into real downloadable artifacts, improving reliability, performance, resource usage, and multi-architecture support.
- Maintain and improve Melange, our package build tool, with a focus on usability, testing, patch management, and observability.
- Design and build automation for rebuild and review workflows — keeping a human in the approval chain while removing every step that can be automated.
- Support shared library transitions using build-time and runtime dependency analysis.
- Build monitoring, dashboards, and alerting. Create automated responses to common failure modes so human attention is reserved for novel problems.
- Define and deliver a roadmap for build and update services within the OS team.
- Document systems thoroughly and reduce single points of knowledge.
Requirements
- By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk.
- This role sits within the GuardedOS team — the foundation layer on which every Chainguard product depends, and will primarily focus on Elastic Build, our Kubernetes-based package build pipeline.
- You will design, implement, operate, and improve the systems that keep Chainguard OS Packages up to date.
- experience with backend or distributed systems.
- Strong programming skills in Go. Comfortable writing production services, ideally including a Kubernetes operator or custom controller. Hands-on
- experience with Kubernetes, Cloud Run, and cloud-native service design.
- Familiarity with GCP services (e.g., BigQuery, IAM, Cloud Logging). •
- Experience with Terraform and CI/CD pipelines.
- Able to work independently and communicate clearly in a remote-first environment.
- Experience with Linux build or packaging systems.
- Understanding of dependency management and rebuild automation.
- Experience with ARM64 build environments.