Software Engineer - Secure Container Images

An engineer on Canonical's secure container images team, building "rocks": minimal, hardened Ubuntu-based container images backed by long-term security maintenance. The role owns the route from upstream source code to a tested, signed and maintained published image.

The engineer maintains a growing set of images across hundreds of open source projects, runs CI/CD pipelines that build, scan, sign and publish them, writes tests for security compliance, and sets image standards for security, size and compatibility. Canonical wants Bash and Python, CI/CD and container-building experience, Docker, Podman or Kubernetes skills, and Linux packaging or release engineering background, with up to seven years of experience. Supply chain security, SBOMs and CVE triage are pluses. Remote, with travel up to 15 percent.