Staff Software Engineer (.NET)

Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. The role, in a nutshell: Imagine a .NET ecosystem where builds are reproducible, NuGet dependencies are trustworthy, and the factory just hums. We're hiring a Staff Software Engineer for Chainguard's Libraries organization, focused on the .NET ecosystem. You'll contribute to the technical direction for our .NET libraries factory: secure, reliable, automated build and packaging pipelines that produce high-quality .NET artifacts for customers and internal teams. This is an infrastructure-focused role. You'll build systems and tooling used by many engineers, directly supporting Chainguard Libraries, one of our major product lines. What you'll do: Own architecture and direction for .NET ecosystem infrastructure, enabling secure, reproducible build, test, and distribution workflows for .NET libraries and SDKs. Design and maintain automation for building, updating, validating, and publishing .NET artifacts (NuGet packages), including vulnerability scanning, remediation, SBOMs, and provenance. Build internal developer tools (dotnet build and MSBuild tasks/targets, NuGet tooling, CLIs, code generators) that improve how we build and maintain .NET packages at scale. Integrate deeply with dotnet projects, NuGet, and artifact repositories, solving complex dependency and version-resolution issues in large codebases and mono-repos. Collaborate with product and engineering leadership to shape the .NET libraries roadmap and deliver on key business outcomes for Chainguard Libraries. Mentor and unblock other engineers through design reviews, documentation, and hands-on debugging of build and infrastructure issues. Partner with Platform, Delivery, Sustaining, and Security to ensure .NET pipelines and services meet reliability and security expectations. What we're looking for: 8+ years working in the .NET ecosystem (C# or similar) on build systems, packaging, or developer tooling, ideally on platform/infra or ecosystem teams. Proven experience building and owning MSBuild extensions, NuGet tooling, CI/CD automation, or internal frameworks/tools for .NET libraries or services. Deep familiarity with building, publishing and consuming in the .NET ecosystem (multi-project/solution builds, dependency graphs, publishing to registries). Strong background in orchestrating large codebases or mono-repos and fixing dependency and build failures in production environments. Proficiency in Go for build orchestration tooling, CLIs, and automation — the team's primary language for pipeline and glue code. Experience with Terraform for managing infrastructure as code. Demonstrated ability to debug toolchain, compiler, and packaging issues at scale and drive them to resolution. Experience with cloud-native environments: containers (Docker/OCI, Kubernetes), public cloud (GCP, AWS, or Azure), and modern CI/CD systems (e.g., GitHub Actions, Argo, Tekton, or similar). Background in DevOps, SRE, or platform engineering — experience at the intersection of build systems and production reliability is a core expectation, not a nice-to-have. Excellent communication in a remote, distributed setup. Comfortable working across product, infra, and security, and mentoring peers at senior levels. A staff-level ownership mindset: you define direction, own critical outcomes, and thrive in an early, high-impact area where engineers help set the roadmap. Systems thinking mindset: co