Software Engineer - Secure Container Images at Canonical

Role overview

With more than 10 billion pulls , Canonical's container images are trusted by developers worldwide to build and run software securely and at scale. That trust rests on our commitment to hardened, production-ready images.

We are advancing the state of the art with a new generation of Ubuntu-based container images we call "rocks": minimal images engineered for performance and usability and backed by long-term security commitments. As a member of the team, you will own the path from upstream source to published image, turning open source software into tested, signed, and continuously maintained artifacts that developers can deploy with confidence.

Responsibilities

• Design, build or support software for secure container image tooling across cloud platforms.
• Investigate technical issues and turn customer or operational findings into durable fixes.
• Collaborate with distributed engineers and stakeholders on architecture, testing and releases.
• Improve automation, documentation, reliability and open-source practices.

Qualifications

• Experience working with CI/CD systems (e.g. GitHub Actions, Jenkins)
• Experience building container images
• Command of at least one container management or orchestration tool (e.g. Docker, Podman, or Kubernetes)
• Hands-on experience with Linux systems, package management, build systems, release engineering, or artifact pipelines
• Clear communication and end-to-end ownership, spanning design, review, documentation, operation, and cross-team collaboration
• A commitment to sharing knowledge and helping those around you grow
• A genuine appetite for learning and for working outside your comfort zone
• A Bachelor's degree or equivalent in Computer Science, a STEM field, or a similar discipline
• An exceptional academic track record from both high school and university
• Business level written and spoken English.
• Sincere personal motivation aligned with our mission.
• International travel 2-4 times a year for company events up to two weeks long.
• In addition we expect that you will match our values, by being:
• Precise, taking care to deliver correctness and clarity.
• Reliable, delivering high quality work that builds trust and confidence.
• Accessible, collaborating to build products and systems that are usable.

Technology in this role

• Python: Python Kubernetes Docker Linux .
• Kubernetes: Python Kubernetes Docker Linux .
• Docker: Python Kubernetes Docker Linux .
• Linux: Python Kubernetes Docker Linux .
• Go: Python Kubernetes Docker Linux .
• Rust: • Familiarity with additional languages such as Go or .
• Bash: • Proficiency in Bash and .
• GitHub Actions: GitHub Actions, Jenkins) Experience building container images Command of at least one container management or orchestration tool .
• Jenkins: GitHub Actions, Jenkins) Experience building container images Command of at least one container management or orchestration tool .
• CI/CD: Experience working with CI/CD systems .
• CAN: As a member of the team, you will own the path from upstream source to published image, turning open source software into tested, signed, and continuously maintained artifacts that developers can deploy with .

Role-specific candidate guide

Preparation notes based on the employer’s stated responsibilities and qualifications.

Understanding the scope. This Software Engineer - Secure Container Images position at Canonical is best assessed through the work described in the employer’s posting, rather than the title alone. The available role overview says: “With more than 10 billion pulls , Canonical's container images are trusted by developers worldwide to build and run software securely and at scale. That trust rests on our commitment to hardened, production-ready images.” Read that statement together with the responsibilities below to understand the likely balance between delivery, coordination and technical decision-making. The role belongs to the software engineering area, but that label is only a guide to the work; the employer’s own requirements remain decisive. Before applying, check the original listing for reporting lines, product or team assignment, employment terms and any details that may have changed since this copy was checked. Where this page says a fact is not specified, treat it as an open question rather than an implied promise.

What the responsibilities signal. The posting specifically names “Design, build or support software for secure container image tooling across cloud platforms.”; “Investigate technical issues and turn customer or operational findings into durable fixes.”; “Collaborate with distributed engineers and stakeholders on architecture, testing and releases.”. For each duty, identify a project where you performed comparable work and be ready to describe the context, your own contribution, constraints, decisions, and measurable result. Explain how you moved from the initial need to implementation, review, release or operational follow-through, where those stages apply. If the work involved other teams or users, distinguish.

Benefits

• We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
• Distributed work environment with twice-yearly team sprints in person
• Personal learning and development budget of USD 2,000 per year
• 40 days annual leave per annum, including public holidays and our All Company holiday periods
• Team Member Assistance Program & Wellness Platform
• Opportunity to travel to new locations to meet colleagues, with Priority Pass for lounge access

About Canonical

Canonical publishes Ubuntu and open-source software for enterprise and technology markets.

Browse job categories

Related jobs

• Cloud Infrastructure Security Engineer at Runpod — Runpod
• Security Engineer at Deepgram — Deepgram
• Senior Customer Onboarding Engineer at Horizon3 — Horizon3
• Senior AWS Cloud DevOps Engineer — Bosch
• Senior AWS Cloud DevOps Engineer — Bosch
• Staff Technical Support Engineer, Web App at Horizon3 — Horizon3