Remote opportunity at
CanonicalSoftware Engineer - Secure Container Images
This position supports Canonical's secure container image programme. The company calls its new Ubuntu-based images rocks: compact, hardened and covered by long-horizon security promises. The engineer…
Career Tools
About This Role
This position supports Canonical's secure container image programme. The company calls its new Ubuntu-based images rocks: compact, hardened and covered by long-horizon security promises. The engineer is responsible for the complete path from upstream source to a published image, which means producing artifacts that are tested, signed and kept current, so developers can rely on them. The role is globally remote. Since most software comes from third-party upstream projects, the…
Job Description
This position supports Canonical's secure container image programme. The company calls its new Ubuntu-based images rocks: compact, hardened and covered by long-horizon security promises. The engineer is responsible for the complete path from upstream source to a published image, which means producing artifacts that are tested, signed and kept current, so developers can rely on them. The role is globally remote.
Since most software comes from third-party upstream projects, the work spans numerous container tools and several hundred upstream projects in several languages. Automation sits at the centre of the job. The engineer builds pipelines covering packaging, building, testing and releasing images at scale, and writes tooling and tests that check security-compliance checks and cloud-native suitability. Other duties include engaging with the community and partners, shaping technical decisions, setting image standards, writing about the work, and mentoring colleagues.
Applicants need fluency in Bash and Python, hands-on use of CI/CD systems, and experience building container images. Working knowledge of at least one container tool, such as Docker, Podman or Kubernetes, is required, along with Linux experience in packaging, compilation tooling, release management or artifact flows. Clear communication, end-to-end ownership and a willingness to share knowledge are essential. Up to 15% travel may be needed for events, and seniority reflects software experience and the ability to guide newer colleagues.
Canonical is a global software company that publishes Ubuntu and has operated a distributed workforce since 2004. The company reports that its container images have been pulled more than 10 billion times.
Responsibilities
- Create and maintain a growing set of hardened, high-quality container images
- Build automated pipelines that compile, validate, check, sign, release, move between channels and retire images across architectures
- Write tooling and tests for security-compliance checks and cloud-native suitability
- Work alongside the community and partner groups, passing on expertise and keeping the catalogue current
- Collaborate with product security, platform, infrastructure and client-facing staff
- Define image standards spanning security, compatibility, speed, footprint and developer experience
- Document the work and mentor others, including involvement in hiring
Requirements
- Fluency in Bash and Python
- Experience with CI/CD tools such as GitHub Actions or Jenkins
- Experience building container images
- Working knowledge of a container management or orchestration utility such as Docker, Podman or Kubernetes
- Hands-on background in Linux systems, packaging, compilation tooling, release management or artifact flows
- Articulate communication and ownership of work from start to finish
- Enthusiasm for passing on knowledge and helping colleagues improve
- Professional-grade written and spoken English
- Abroad trips roughly two to four times annually for company gatherings of up to a fortnight
- Working from home, with worldwide travel of as much as 15% for in-house and outside events
Qualifications
- Degree-level study in computing, a STEM subject or a closely related area
- Strong academic record from school and university
- Security-minded maintenance habits, such as investigating vulnerability findings and shipping safe fixes
- Understanding of supply chain security, including SBOM, signing, provenance or CVE reporting
- Experience with GitOps, Go or Rust, or with minimal and distroless image builds
- Knowledge of OCI specifications and of standards like CIS, NIST, FedRAMP, DISA STIG and similar
- Credentials such as CKS or DCA, or other Linux and container certificates, count in your favour
Core Skills
Benefits
- 40 days of annual leave per year, covering public holidays and company holiday periods
- USD 2,000 yearly budget for learning and development
- Compensation review every two years, plus company recognition awards
- Maternity and paternity leave
- Team member assistance programme and wellness platform
- Chances to visit new cities for team get-togethers, plus Priority Pass lounge access
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is the role remote?
Yes, the posting describes it as a globally remote role.
What tools and skills are required?
Fluency in Bash and Python, CI/CD experience, experience building container images, and command of a tool such as Docker, Podman or Kubernetes are listed.
How much travel is involved?
Up to 15% of working time may go on trips worldwide for events, and trips abroad roughly two to four times annually for company gatherings of up to a fortnight.
How much experience is required?
The posting gives a relevant experience range of 0 to 7 years and says seniority reflects software engineering experience and the ability to mentor others.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.