Senior Software Engineer Guarded OS

Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital.

The role, in a nutshell:

Chainguard is hiring a Senior Software Engineer to take a significant role on the services and tooling that build and update the software that makes up Chainguard OS. This role sits within the GuardedOS team — the foundation layer on which every Chainguard product depends, and will primarily focus on Elastic Build, our Kubernetes-based package build pipeline.

This is a high-ownership, high-variety engineering role. You will design, implement, operate, and improve the systems that keep Chainguard OS Packages up to date. You'll be the person who turns ambiguity into an action plan and executes without breaking things — fast, with a clear eye on long-term maintainability.

What you’ll do:

• Operate and develop the Elastic Build service, our Kubernetes + GitHub + Cloud Run pipeline that converts package specifications into real downloadable artifacts, improving reliability, performance, resource usage, and multi-architecture support.
• Maintain and improve Melange, our package build tool, with a focus on usability, testing, patch management, and observability. Melange is largely feature-complete; the work here is hardening and instrumentation, not feature addition.
• Design and build automation for rebuild and review workflows — keeping a human in the approval chain while removing every step that can be automated. Support shared library transitions using build-time and runtime dependency analysis.
• Build monitoring, dashboards, and alerting. Create automated responses to common failure modes so human attention is reserved for novel problems.
• Define and deliver a roadmap for build and update services within the OS team.
• Document systems thoroughly and reduce single points of knowledge.
• Contribute to distro-level package updates and help keep Chainguard OS up-to-date and secure.

What we're looking for:

• 4+ years of software engineering experience with backend or distributed systems.
• Strong programming skills in Go. Comfortable writing production services, ideally including a Kubernetes operator or custom controller.
• Hands-on experience operating production services at scale, and has responded to real incidents, restored service, and improved systems to prevent recurrence.
• Hands-on experience with Kuber