New

Software Engineer - Secure Container Images

Home based - EMEA

With more than 10 billion pulls, Canonical's container images are trusted by developers worldwide to build and run software securely and at scale. That trust rests on our commitment to hardened, production-ready images.

We are advancing the state of the art with a new generation of Ubuntu-based container images we call "rocks": minimal images engineered for performance and usability and backed by long-term security commitments. As a member of the team, you will own the path from upstream source to published image, turning open source software into tested, signed, and continuously maintained artifacts that developers can deploy with confidence.

This is fast-paced, multi-disciplinary software engineering. Because most of the software we package originates from third-party upstreams, you will work across a broad range of container technologies and hundreds of open source projects, often in several programming languages, integrating and maintaining them so they are easy to consume on Ubuntu. Automation is central to the role: you will build the pipelines that package, build, test, and publish images at scale.

Your seniority in this role will reflect your software engineering experience and your ability to mentor and guide more junior colleagues.

Location: This role is based in the EMEA region

This role entails

  • Build and maintain a growing portfolio of high-quality, hardened container images
  • Design and operate automated CI/CD pipelines that build, test, scan, sign, publish, promote, and retire images across environments and architectures
  • Write tooling and tests to assess security compliance and cloud-native compatibility
  • Work closely with the community and partners to share container expertise and keep our portfolio current with new features, patches, and applications
  • Collaborate with our product security, platform, infrastructure, and customer-facing teams
  • Contribute technical input to the team's decision-making
  • Set the standard for quality, defining image standards that span security, compatibility, performance, size, and developer experience
  • Grow our knowledge base and write about the work we do
  • Work in a collaborative, agile, and globally distributed environment
  • Mentor colleagues and contribute to hiring
  • Work from home with global travel of up to 15% for internal and external events

What we are looking for in you

  • Proficiency in Bash and Python
  • Experience working with CI/CD systems (e.g. GitHub Actions, Jenkins)
  • Experience building container images
  • Command of at least one container management or orchestration tool (e.g. Docker, Podman, or Kubernetes)
  • Hands-on experience with Linux systems, package management, build systems, release engineering, or artifact pipelines
  • Clear communication and end-to-end ownership, spanning design, review, documentation, operation, and cross-team collaboration
  • A commitment to sharing knowledge and helping those around you grow
  • A genuine appetite for learning and for working outside your comfort zone
  • A Bachelor's degree or equivalent in Computer Science, a STEM field, or a similar discipline
  • An exceptional academic track record from both high school and university
  • Business level written and spoken English.
  • Sincere personal motivation aligned with our mission.
  • International travel 2-4 times a year for company events up to two weeks long.
  • 0-7 years relevant experience.

In addition we expect that you will match our values, by being:

  • Precise, taking care to deliver correctness and clarity.
  • Reliable, delivering high quality work that builds trust and confidence.
  • Accessible, collaborating to build products and systems that are usable.
  • Adroit, blending enthusiasm, knowledge, adaptability, style and character.

Nice-to-have skills

  • A security-oriented maintenance mindset: you can investigate dependency and vulnerability findings, assess their impact, and deliver a safe fix
  • An understanding of software supply chain security, with some experience generating and consuming artifacts such as SBOMs, signatures, provenance, or CVE reports
  • Familiarity with GitOps principles and workflows
  • Familiarity with additional languages such as Go or Rust
  • Hands-on experience building minimal and distroless container images
  • Knowledge of the OCI specifications
  • Familiarity with security or compliance frameworks such as CIS, NIST, FedRAMP, or DISA STIG
  • Evidence of contributions to open source projects
  • A passion for embedding security across all stages of the engineering lifecycle (DevSecOps), and an interest in using AI or agentic development responsibly and safely
  • Relevant Linux, container, or cloud-native certifications (such as CKS or DCA) are welcome

If your experience is close but does not match every requirement, we encourage you to apply. We value transferable experience from Linux packaging, release engineering, build systems, platform engineering, and open-source maintenance.

What we offer colleagues

We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.

  • Distributed work environment with twice-yearly team sprints in person
  • Personal learning and development budget of USD 2,000 per year
  • Bi-annual compensation review
  • Company recognition rewards
  • 40 days annual leave per annum, including public holidays and our All Company holiday periods
  • Maternity and paternity leave
  • Team Member Assistance Program & Wellness Platform
  • Opportunity to travel to new locations to meet colleagues, with Priority Pass for lounge access

About Canonical

Canonical is a pioneering tech firm at the forefront of the global move to open source. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. We are founder-led, profitable, and growing.

Powered by worldwide distributed collaboration since our inception in 2004, we believe tech and business leadership can emerge anywhere. We have no central headquarters. Most of us work from home, but we are exceptionally disciplined about this. We have very high expectations of all colleagues, and are champions of excellence. Working here is a step into the future and will challenge you to think differently, work smarter, learn new skills, and raise your game.

Canonical is an equal opportunity employer

We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...
Select...

Universities around the world score degrees in different ways. Please indicate your result, or expected result if you are close to graduation, along with information about the grading system.

Select...

Please note that if you require any accommodation for travel that relates to a physical disability, do let us know during your hiring process and we will be happy to discuss your requirements further.

Select...

Please select your current location from the dropdown.

Select...
Select...
Select...

We're focused specifically on the last ten years, and only the portion of that since you left undergrad university. If you graduated three years ago, just count the number of companies you have worked for in those three years. If you graduated 25 years ago, just count the companies in the last ten years.

If you worked for a company which was acquired or renamed, then please count that as one company not two. Don't count any university jobs or internships. If you have your own company or do private contracting work in addition to your employment, please count that as one company.

Select...

This information is being requested to help us maintain equal opportunities, best practices and comply with legal requirements. The submission of this information is entirely voluntary. The information you provide will not be used in our decision making and will not subject you to any adverse treatment.

Select...

This information is being requested to help us maintain equal opportunities, best practices and comply with legal requirements. The submission of this information is entirely voluntary. The information you provide will not be visible to, or used by, our decision makers, and will not subject you to any adverse treatment.

Select...

This information is being requested to help us maintain equal opportunities, best practices and comply with legal requirements. The submission of this information is entirely voluntary. The information you provide will not be visible to, or used by, our decision makers, and will not subject you to any adverse treatment.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Canonical’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 07/31/2029

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.