Location: San Leandro, CA (hybrid)

Employment Type: Full-time

About the Role

AVEVA is seeking a skilled Senior Software Engineer to join our Dev Services organization and take a key role in the ongoing development, operations, and scaling of our Trusted Container Registry (TCR) platform.

TCR is central to our secure software supply chain strategy. It provides development teams with secure, pre‑scanned, digitally signed container images and enables consistent, reliable, and secure build workflows across AVEVA’s product portfolio. With adoption rapidly expanding across R&D, we are adding a dedicated engineer to help us accelerate delivery, improve developer experience, and support long-term platform growth.

This high‑impact role is ideal for someone who enjoys building internal platforms, automating container workflows, and strengthening security and compliance across the software development lifecycle.

Key Responsibilities

• Build, operate, and improve the Trusted Container Registry (TCR) and its supporting services.

• Develop automation for image ingestion, tagging, scanning, signing, and publishing.

• Implement and maintain security controls such as vulnerability scanning, malware detection, and Cosign-based signature verification.

• Enhance developer experience by expanding the catalog of secure, vetted base and application images.

• Support onboarding and enablement for engineering teams adopting TCR across AVEVA.

• Collaborate closely with Product Security to deliver roadmap features and ensure secure and compliant container operations.

• Contribute to registry auditability, usage reporting, and compliance initiatives (including emerging open-source escrow requirements).

Required Skills

• Hands-on experience with containers, registries, and OCI image workflows.

• Strong knowledge of CI/CD pipelines and automation (e.g., Azure DevOps, GitHub Actions, Jenkins).

• Experience with Kubernetes, Helm charts, or cloud-native infrastructure such as Azure, AWS or Google Cloud.

• Experience with container security tools (scanning, signing, SBOMs, vulnerability detection).

• Solid Linux systems engineering and debugging skills.

• Proficiency in at least one scripting or programming language (Python, PowerShell, Bash, Go, etc.).

• Experience working in DevOps, platform engineering, or internal developer platform environments.

• Working experience with object- oriented programming languages such as C# and .NET.

Desired Skills

• Experience with Cosign, Sigstore, or container signing frameworks.

• Experience with BlackDuck, Trivy or similar enterprise security scanning tools.

• Understanding of secure software supply chain frameworks (e.g., SLSA, NIST SSDF).

• Strong communication skills for negotiations with stakeholders and troubleshooting with internal developer community.

USA Benefits include:

Flex work hours, 20 days PTO rising to 25 with service, three paid volunteering days, primary and secondary parental leave, well-being support, medical, dental, vision, and 401K.

It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.

Hybrid working

We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.

Hiring process

Interested? Great! Get started by submitting your cover letter and CV through our application portal. AVEVA is committed to recruiting and retaining people with disabilities. Please let us know in advance if you need reasonable support during your application process.