Software Engineer - Secure Container Images

About the Role

Canonical is seeking a Software Engineer to join our team focused on secure, production-ready container images. You will own the lifecycle of our Ubuntu-based "rocks"—minimal, high-performance container images—from upstream source to published, signed artifacts.

This is a fast-paced, multi-disciplinary role where you will work across hundreds of open-source projects, build automation pipelines, and ensure our images meet the highest standards of security and usability.

Key Responsibilities

• Image Lifecycle: Build and maintain a portfolio of hardened, production-ready container images.
• Automation: Design and operate CI/CD pipelines for building, testing, scanning, signing, and publishing images.
• Security & Compliance: Write tooling to assess security compliance and cloud-native compatibility.
• Collaboration: Work with community, partners, and internal teams (security, platform, infrastructure) to keep our portfolio current.
• Standards: Define and enforce standards for security, performance, size, and developer experience.
• Mentorship: Guide junior colleagues and contribute to hiring efforts.

What We Are Looking For

• Technical Skills: Proficiency in Bash and Python; experience with CI/CD systems (e.g., GitHub Actions, Jenkins).
• Container Expertise: Experience building container images and using orchestration tools (Docker, Podman, or Kubernetes).
• Systems Knowledge: Hands-on experience with Linux, package management, and release engineering.
• Communication: Clear, professional communication skills in English.
• Education: Bachelor's degree or equivalent in a STEM field with an exceptional academic record.
• Experience: 0-7 years of relevant experience.
• Travel: Ability to travel internationally 2-4 times a year for company events (up to 15% total).

Nice-to-Have Skills

• Experience with software supply chain security (SBOMs, signatures, CVE reports).
• Familiarity with GitOps, Go, Rust, or OCI specifications.
• Knowledge of security frameworks (CIS, NIST, FedRAMP, DISA STIG).
• Contributions to open-source projects.
• Relevant certifications (e.g., CKS, DCA).

What We Offer

• Distributed work environment with twice-yearly in-person sprints.
• Annual personal learning and development budget of $2,000 USD.
• Bi-annual compensation reviews and performance-driven bonuses.
• 40 days of annual leave (including public holidays).
• Comprehensive benefits including maternity/paternity leave and wellness platforms.