Software Engineer (Libraries Platform) at Chainguard
$121,000–$142,000
Jul 27, 2026
—
Jul 28, 2026
What this job asks for AI summary
A Senior Software Engineer role on Chainguard's Libraries Platform team, responsible for designing and building the services, APIs, pipelines, and package indexes that power secure, reproducible open-source library builds across Java, JavaScript, and Python/AI/ML ecosystems. The role spans platform engineering, developer tooling (primarily in Go), CI/CD automation, CVE remediation workflows, and SRE-style reliability ownership for a system serving both external customers and internal teams.
Senior level · 5+ years · Remote · Full-time
Pay in the description: $121,000–$142,000
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 13,400 people nationally plausibly meet what this posting asks for (software developers). range 8,000–24,000
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $138,970 (middle half $107,524–$175,762). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (7)
The role sits at the intersection of platform/infrastructure engineering and software development — it primarily SHIPS code (services, CLIs, pipelines in Go) rather than operating existing infrastructure, which is why Software Developers was chosen over Network/Systems Admins, though the SRE/reliability responsibilities are substantial.
GCP is the first-named cloud provider but the JD lists AWS and Azure as equivalents in the same requirement; all three are captured under GCP with the others as alternatives.
GitHub Actions, Argo, and Tekton are listed as interchangeable options in the same requirement; GitHub Actions is used as the primary name with the others as alternatives.
The 'Nice to have' section covers SBOM/provenance/SLSA/sigstore experience, open-source ecosystem contributions, Linux packaging/reproducible builds (Alpine, Wolfi, Debian, Bazel, CMake, Ninja), and prior SRE/platform/DevOps roles — all marked as preferred.
The posting contains a deliberate anti-AI-resume signal ('bonfires are my jam') embedded in the requirements section; this is not a technical requirement and is not extracted as a skill.
No degree requirement is stated anywhere in the posting.
The role is fully remote; no primary office location is specified.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.