Software Platform Engineer with Docker and OCI

Svitla Systems Inc. is looking for a Software Platform Engineer with Docker and OCI for a full-time position (40 hours per week) in Europe. Our client is a cloud-native cybersecurity company that helps organizations automatically and continuously minimize the attack surface of their cloud workloads. 

You'll join the Platform/Security Engineering Team to own the lifecycle of the curated container image catalog. You'll be responsible for producing hardened, minimal, and continuously patched Docker images that downstream teams and customers rely on in production. 

Requirements

• Strong knowledge of Docker and OCI image internals — Dockerfile best practices, layer optimization, multi-stage builds, image scanning, and reproducible builds.

• Hands-on experience writing and maintaining Helm charts and deploying applications to Kubernetes.

• Knowledge of at least one scripting language (Bash, Python, or Go) for build automation and tooling.

• Solid experience with Linux: package managers (apt, apk, yum/dnf), users/permissions, filesystems, and basic networking.

• Familiarity with CI/CD systems (GitHub Actions, GitLab CI, Jenkins, or similar) and Git-based workflows.

Nice to have

• Experience remediating CVEs and working with vulnerability scanners (Trivy, Grype, Snyk, Clair, or similar).

• Familiarity with package build systems (apk, deb, rpm) or building software from source.

• Familiarity with Kubernetes testing tools (helm test, kind, k3d, Testcontainers).

• Understanding of compliance frameworks (FedRAMP, FIPS, CIS Benchmarks).

Responsibilities

• Build and maintain curated, minimal, and hardened versions of popular Docker images (e.g., language runtimes, databases, web servers, data tools).

• Triage, prioritize, and remediate CVEs across the image catalog — patching upstream packages, rebuilding affected images, and validating fixes against vulnerability scanners.

• Design and improve image build pipelines, including multi-stage Dockerfiles, distroless/minimal base layers, SBOM generation, and image signing.

• Write and maintain Helm charts (and supporting test harnesses) to validate that curated images function correctly when deployed to Kubernetes.

• Author automation scripts and tooling to continuously rebuild, scan, test, and publish images on upstream changes or new CVE disclosures.

• Investigate and reproduce build failures, runtime regressions, and compatibility issues introduced by patched dependencies.

• Document image usage, breaking changes, and migration guidance for consumers.

We offer

• US and EU projects based on advanced technologies.

• Competitive compensation based on skills and experience.

• Regular performance appraisals to support your growth.

• Flexibility in workspace, either remote or our welcoming office.

• Bonuses for article writing, public talks, and other activities.

• Generous time off, including vacation, national holidays, sick leaves, and family days.

• Personalized learning programs tailored to your interests and skill development.

• Free tech webinars and meetups organized by Svitla.

• Regular corporate online activities.

• Awesome team and a friendly, supportive community!