Engineering Manager, Supply Chain Security at Docker

At Docker, we make app development easier so developers can focus on what matters. Our remote-first team spans the globe, united by a passion for innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is the #1 tool for building, sharing, and running apps—trusted by startups and Fortune 100s alike. We’re growing fast and just getting started. Come join us for a whale of a ride!

The Supply Chain Security group is remaking software development and operations security through a holistic, developer-first approach to securing software and software artifacts. We are developing an end-to-end solution for securing the container ecosystem, starting in the developer inner loop and continuing through to production, emphasizing ease-of-use and automation every step of the way. This Engineering Manager will lead the team focused on Docker Hardened Images. This team secures container images, maintains the system that builds them, and works day-to-day with open-source software, Linux distribution packages, BuildKit, GitHub Actions, Docker Scout, and CVEs. This engineering leader should be experienced with those technologies. Beyond building images, this leader and their team will have extensive interaction with customers using Docker Hardened Images.

If you are comfortable in a fast-paced, customer-first environment empowering you to take ownership of your team’s priorities and team members’ careers, this role is for you. Come contribute to creating an amazing developer experience around secure containers with the world’s experts in container images and supply chain security!

Responsibilities:

• Lead a team of engineers across Europe and North America creating Docker Hardened Images and maintaining the system that builds them

• Work with the Supply Chain Security leadership to translate roadmap and priorities into work for your team

• Take active ownership of your team members’ development, growth, and performance

• Own the team’s execution and agile ceremonies

Qualifications:

• Experience leading teams performing container image builds in CI

• Understanding of container images, container image hardening, and security tooling like Docker Scout

• Familiarity with software supply chain concepts, e.g., SLSA, in-toto, CVEs, cryptographic signing, and repeatable builds

• Experience leading agile, remote engineering teams

• High degree of independence and ownership

• Obsession with enabling engineers to do great work and delivering value to customers

• Perform architecture and code reviews

What to expect in the first 30 days:

• Get to know your team and the larger Supply Chain Security group

• Take ownership of the team’s agile ceremonies and planning

• Set up weekly 1:1 meetings with each of your reports

• Become familiar with Docker Hardened Images and its build system

What to expect in the first 90 days:

• Continue to manage team and own its execution

• Work with product managers to translate roadmap into prioritized backlog

• Engage with Docker Hardened Images customers

• Ensure team is meeting its SLAs

• Regularly report progress and challenges to Supply Chain Security leadership

• Guide team as they work to enhance and evolve their build platform

• Coordinate cross-team efforts with other engineering managers

What to expect in the first year:

• Help team significantly accelerate the rate at which new repositories are added to the Docker Hardened Image catalog

• Provide each engineer on the team with the context and support they need to improve and excel

• Embrace data-driven tracking and reporting of how Docker Hardened Images are helping to increase developer productivity while reducing vulnerability exposure

• Grow in your own engineering management skills and technical knowledge of the software supply chain security space

• In collaboration with your manager, you will have a career development plan that will outline your trajectory beyond your first year.

• ts, retirement and holidays vary by country

We use Covey as part of our hiring and / or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on April 13, 2024.

Please see the independent bias audit report covering our use of Covey here.

Perks

• Freedom & flexibility; fit your work around your life

• Designated quarterly Whaleness Days

• Home office setup; we want you comfortable while you work

• 16 weeks of paid Parental leave

• Technology stipend equivalent to $100 net/month

• PTO plan that encourages you to take time to do the things you enjoy

• Quarterly, company-wide hackathons

• Training stipend for conferences, courses and classes

• Equity; we are a growing start-up and want all employees to have a share in the success of the company

• Docker Swag

• Medical benefits, retirement and holidays vary by country

Docker embraces diversity and equal opportunity. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our company will be.

Due to the remote nature of this role, we are unable to provide visa sponsorship.

#LI-REMOTE