About Docker

Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.

We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.

_______________________________________________________________________

The Role

As AI agents redefine software development, Docker is at the center of that shift, providing the local and cloud sandboxed environments that make interactive and autonomous agentic workflows trustworthy by default. At the heart of our trust model is the fact that user credentials and other sensitive secrets are injected at the sandbox layer and never exposed to an agent. An agent can never leak secrets it never sees.

The Secrets team builds the software that makes that possible, from easy-to-use SDKs to secure cloud services to high-performance network proxies. We operate at the intersection of the developer experience, enterprise governance, and security – delivering core security features that make Docker sandboxes the best way to run agents and other workloads safely.

As a Staff Software Engineer on the Secrets team, you’ll design and build core security systems that power Docker’s agentic platform and AI governance products. Your work will focus on creating scalable, reliable, and secure software that enables developers to safely run agentic workloads while allowing administrators to confidently manage their organization’s security posture.

The successful candidate is a technical, product-minded engineer with deep experience building secure software and scale-out cloud services and a track record of shipping critical infrastructure. They think naturally about isolation and security boundaries, understand the tradeoffs involved in running untrusted or semi-trusted workloads safely, and can reason confidently about a system that spans multiple surface areas.

If you thrive on solving security and usability challenges, are enthusiastic about agentic development but conscious of the risks it entails, and want to help shape the future of Docker’s platform, we’d love to hear from you.

Please note: this role is currently prioritizing candidates currently located in the Western time zone (US or Canada).

_______________________________________________________________________

Responsibilities

Design, develop, and lead improvements to the secrets management and credential injection systems.

Investigate and resolve security, correctness, performance, and stability issues across cloud, macOS, Windows, and Linux.

Collaborate with peers, Product, and adjacent teams to evolve the architecture as requirements grow.

Mentor engineers on the team and set the bar in design reviews and code reviews.

Engage with the open source and agentic development community around sandboxing, MCP, and related ecosystems.

Participate in on-call rotations and respond to critical stability issues affecting users.

Document your work clearly and share knowledge with the rest of the team.

_______________________________________________________________________

Qualifications

Required

8+ years of software engineering experience, with demonstrated technical leadership on production systems at scale.

Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience

Experience building developer tools, desktop applications, or runtime infrastructure used directly by developers.

Familiarity with the agentic software development ecosystem: how coding agents work and how tools like Claude Code, Codex, or similar agents interact with their environment.