Chainguard is seeking a Senior Software Engineer to join the Libraries Platform. This infrastructure-centric role leads the architecture and implementation of services, APIs, and automation that power a secure, reproducible factory for open-source libraries used by external customers and internal teams across Java, JavaScript, Python/AI/ML, and beyond. The Libraries Platform includes shared services, build and packaging pipelines, and a package index serving external customers and internal ecosystem teams. Responsibilities include designing core components of the Libraries Platform (services, pipelines, and package index), building automation for artifact creation, updates, and verification (including vulnerability scanning, remediation workflows, SBOM and provenance generation, and policy enforcement), and developing AI-assisted patching to create security fixes beyond upstream patches. You will build and operate shared platform services such as package indexes, registry mirrors, metadata services, and orchestration tooling; develop internal developer tools and CLIs (often in Go) that integrate with build systems and CI/CD for multiple ecosystems; drive reliability, scalability, and observability by defining SLOs, implementing monitoring and alerting, and leading post-incident improvements. You will troubleshoot complex dependency and build issues in production, collaborating with ecosystem teams (Java, JavaScript, Python/AI/ML), Platform, Delivery, Sustaining, and Security to ensure reliability, security, and product outcomes; mentor engineers through design reviews, docu

Chainguard is seeking a Senior Software Engineer to join the Libraries Platform. This infrastructure-centric role leads the architecture and implementation of services, APIs, and automation that power a secure, reproducible factory for open-source libraries used by external customers and internal teams across Java, JavaScript, Python/AI/ML, and beyond. The Libraries Platform includes shared services, build and packaging pipelines, and a package index serving external customers and internal ecosystem teams. Responsibilities include designing core components of the Libraries Platform (services, pipelines, and package index), building automation for artifact creation, updates, and verification (including vulnerability scanning, remediation workflows, SBOM and provenance generation, and policy enforcement), and developing AI-assisted patching to create security fixes beyond upstream patches. You will build and operate shared platform services such as package indexes, registry mirrors, metadata services, and orchestration tooling; develop internal developer tools and CLIs (often in Go) that integrate with build systems and CI/CD for multiple ecosystems; drive reliability, scalability, and observability by defining SLOs, implementing monitoring and alerting, and leading post-incident improvements. You will troubleshoot complex dependency and build issues in production, collaborating with ecosystem teams (Java, JavaScript, Python/AI/ML), Platform, Delivery, Sustaining, and Security to ensure reliability, security, and product outcomes; mentor engineers through design reviews, docu