D

Docker

Containerization platform for building apps

Principal Forward Deployed Engineer

Full-TimeUpdated on 10/23/2026
$198k - $319k+ Equity
Expert
Bachelor's
Seattle, WA, USA+2 moreMore locations: San Francisco, CA, USA | San Jose, CA, USA
RemoteRemote-first; customer-site travel up to 50%.
Software EngineeringAI Application Engineering
H1B Sponsorship Available

About the job

Requirements
  • The candidate must have 10 or more years of software engineering experience, including 4 or more years in a customer-facing technical role such as Forward Deployed Engineer, Solutions Engineer, Professional Services Engineer, or Software Engineer with consulting or technical founder experience.
  • The candidate must have technical leadership experience across multiple engagements, teams, or domains, with the ability to set delivery standards, define repeatable patterns, and influence product direction through field evidence.
  • The candidate must have expert production coding skills in Go, Python, or TypeScript, a record of shipping and operating software others depend on, and experience leading technical design reviews.
  • The candidate must have deep, hands-on Docker expertise, including Dockerfiles and multi-stage builds, Docker Compose, image and registry operations, container networking and storage, and container security fundamentals.
  • The candidate must have hands-on experience building with large language models and agents in production, including tool use and function calling, Model Context Protocol server and client implementation, prompt and context engineering, and evaluation of agent behavior.
  • The candidate must have working knowledge of software supply chain security, including software bills of materials, image signing and attestation, vulnerability management, minimal and hardened base images, and secure continuous integration and continuous delivery.
  • The candidate must have experience integrating enterprise systems, including identity providers such as Okta, Entra ID, and LDAP/Active Directory; federated identity protocols such as OpenID Connect and Security Assertion Markup Language; secrets managers; Kubernetes; and at least one major cloud platform such as AWS, Azure, or GCP.
  • The candidate must be able to scope and deliver complex work in ambiguous, fast-moving customer environments, making sound trade-offs among scope, speed, and quality.
  • The candidate must be able to communicate with engineers, security and platform teams, and executive stakeholders, and lead through influence rather than authority.
  • The candidate must have a proven track record of technical mentorship and raising the bar for other engineers.
  • The candidate must be comfortable operating autonomously in distributed, remote-first teams.
  • A bachelor's degree in Computer Science, Engineering, or a related field is required, or equivalent practical experience.
  • The candidate must be willing to travel to customer sites to build in person with customer teams, estimated at up to 50%.
Responsibilities
  • Embed with customer engineering teams to design, build, and ship solutions from first prototype through stable production rollout, using existing Docker products and patterns when possible and inventing, prototyping, and validating new solutions when necessary.
  • Deliver technical artifacts to customers, including custom Model Context Protocol servers integrated with Docker Sandbox environments for coding agents and containerized agents; Docker Compose definitions for multi-agent harnesses and model-backed applications; hardened-image standardization and migration; and tools that unblock customer progress.
  • Integrate Docker's AI platform with customer systems, including identity providers, secrets management, private and air-gapped registries, Kubernetes, continuous integration and continuous delivery pipelines, and observability tooling.
  • Own technical delivery on engagements by scoping and sequencing work, making trade-offs between speed and quality, removing blockers early, and contributing directly to code when needed.
  • Translate customer security, compliance, and platform requirements into concrete plans and carry those plans from ideation through production.
  • Help customers define controls to adopt agentic AI for business problems while maintaining security, compliance, data sovereignty, and end-user experience.
  • Establish customer quality and performance standards and work with Docker Product and Engineering to address issues outside established thresholds.
  • Partner with customer security and platform teams to move agentic workloads through architecture review, threat modeling, and change control.
  • Work with Solutions Architects to enable off-the-shelf solutions when possible and provide technical experience and leadership when bespoke solutions are necessary.
  • Feed implementation learnings into reference architectures, statements of work templates, and success patterns so that innovations become standard features and implementation patterns.
  • Support the field with technical depth during proofs of concept, escalations, and expansion conversations when a working build is the fastest path to customer adoption.
  • As part of Docker Engineering, work closely with Product and Engineering teams to incorporate field innovations, learnings, and design patterns into existing or new products and services.
  • Work with customers, Product, and Engineering to establish quality and performance thresholds, ensure customer environments meet them consistently, and respond quickly when they do not.
  • Deliver data-driven, actionable customer feedback to Product and Engineering on what works, what does not, customer requests, and adoption blockers.
  • Define the Forward Deployed Engineer engagement model, delivery standards, and quality bar, and codify them for consistency across customers, regions, and delivery partners.
  • Mentor and lead other Forward Deployed Engineers and participate in hiring loops to grow the team.
  • Act as the senior technical escalation point on difficult customer problems and use incidents to improve Docker products and services.
  • Maintain current knowledge of the agentic AI stack, including large language models, application programming interfaces, Model Context Protocol, coding agents, model and harness evaluation approaches, performance and quality thresholds, and deployment patterns.
  • Participate in an on-call rotation outside standard business hours, including evenings, weekends, and holidays, as needed.
Desired Qualifications
  • Experience with Docker Hardened Images, Docker Scout, MCP Gateway, MCP Toolkit, Docker Sandboxes, or Docker Model Runner.
  • Experience deploying and operating coding agents such as Claude Code, Codex, Gemini CLI, or Cursor in team or enterprise settings.
  • Experience with air-gapped, regulated, or compliance-driven environments in financial services, healthcare, government, or similar sectors.
  • Contributions to open-source projects in the container, Kubernetes, or MCP ecosystems.
  • Prior experience founding or scaling a Forward Deployed Engineering or Professional Services practice.

About the company

Docker builds, shares, and runs applications in isolated containers by packaging an application and its dependencies into a container image that runs consistently across different systems. It provides tools like Docker Desktop for local development, Docker Hub as a container image repository, and a command-line interface to build, run, and manage containers. It differentiates itself with a large ecosystem, an official image repository, and integrated tools that support an end-to-end container workflow. The company aims to help developers consistently build, share, and run software across any environment, using a freemium model with subscription tiers and additional services.

Company Size

1,001-5,000

Company Stage

Series C

Total Funding

$526M

Headquarters

Palo Alto, California

Founded

2013

Get referred to Docker

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Docker added Mat Velloso and Vinh Le on August 18, 2026, sharpening AI execution.
  • Cloud Sandboxes boot in hundreds of milliseconds and scale to 16 vCPUs.
  • Docker is submitting Kits to CNCF, positioning itself as the agent standard.

What critics are saying

  • Podman Desktop and free registries like Harbor undercut Docker Desktop and Hub pricing.
  • Docker Cloud Sandboxes remain experimental in docs, and one-hour expirations disrupt long jobs.
  • If OCI-native Kits standardize without Docker, the company becomes a replaceable runtime wrapper.

What makes Docker unique

  • Docker Cloud Sandboxes launched September 24, 2026, extending agent isolation from laptop to cloud.
  • Docker's Sandbox Kit Spec v3 packages permissions, tools, and volumes into OCI images.
  • Docker unifies Hub, Desktop, and AI governance across one developer workflow.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Flexible Work Hours
  • Home Office Stipend
  • Parental Leave
  • Phone/Internet Stipend
  • Unlimited Paid Time Off
  • Professional Development Budget
  • Company Equity
  • Health Insurance

Growth & Insights and Company News

6 month growth

0%

1 year growth

-1%

2 year growth

-2%
PR Newswire
Sep 24th, 2026
BAND partners with Docker to enable safe sandboxed execution for multi-agent AI teams

BAND has partnered with Docker to integrate sandboxed local execution into its multi-agent collaboration platform. The integration enables developers to run AI agents inside Docker Sandboxes' isolated microVM environments whilst connecting them to larger agent teams through BAND's platform. The BAND Python Kit for Docker Sandboxes allows agents to work with local codebases in isolated environments while communicating with other agents and humans in BAND rooms. BAND provides collaboration infrastructure, including persistent agent identities and shared rooms, whilst Docker Sandboxes offers isolated execution with its own kernel and filesystem. The architecture enables sophisticated workflows where hosted and local agents can collaborate. A BAND room might contain hosted planning and research agents alongside a local coding agent in a Docker Sandbox, with only the local agent accessing the repository. The integration addresses challenges as AI agents evolve from chat interfaces to autonomous systems requiring safe code execution and collaboration capabilities.

Associated Press
Sep 24th, 2026
Docker launches cloud sandboxes for secure AI agent execution beyond local machines

Docker has launched Docker Cloud Sandboxes, enabling AI agents to run in cloud infrastructure rather than on developers' laptops. The solution extends Docker's secure local sandbox isolation to the cloud, allowing agentic workflows to continue running after machines shut down. The service lets developers start work locally and shift to the cloud without switching environments. Cloud Sandboxes boot in hundreds of milliseconds and scale from 1 to 16 vCPUs without requiring infrastructure provisioning. Docker also introduced next-generation Kits, an open specification for packaging agentic sandboxes as standard OCI images. The company plans to submit the Kits specification to the Cloud Native Computing Foundation. Docker Cloud Sandboxes are available now at docker.com/products/docker-sandboxes.

Associated Press
Aug 18th, 2026
Docker names Mat Velloso CPO and Vinh Le CFO to lead agentic AI expansion

Docker has appointed Mat Velloso as chief product officer and Vinh Le as chief financial officer to strengthen its leadership team as the company expands into agentic workflow management. Velloso brings 15 years of experience from Microsoft, where he advised the CTO and CEO, and later worked with Google AI Studio and Meta on AI strategy. At Docker, he will drive product strategy to help customers secure and manage agentic workflows at enterprise scale. Le joins from PolyAI, bringing experience from Electronic Arts, Tanium, and BetterUp. He will lead Docker's global finance organisation and support the company's growth strategy. Docker positions itself as a trusted platform for building software in what it calls the "agentic era", helping organisations deploy autonomous agents whilst maintaining security and governance.

Wikipedia
May 14th, 2026
Docker, Inc.

Docker, Inc. is an American technology company that develops productivity tools built around Docker, which automates the deployment of code inside software containers via OS-level virtualization.[1][2] Major commercial products of the company are Docker Hub, a central repository of containers, and Docker Desktop, a GUI application for Windows, Linux and macOS to manage containers. The historic offering was Docker Enterprise PaaS business, acquired by Mirantis.[3] The company is also an active contributor to various CNCF projects, such as containerd and runC. The main open source offering of the company are Docker Engine and buildkit which are rebranded under the Moby umbrella project. The core specification, Dockerfile, still includes the company trademark, however.

TechCrunch
Mar 13th, 2026
Docker partners with NanoClaw creator weeks after viral AI agent tool launch

NanoClaw creator Gavriel Cohen has struck a deal with Docker to integrate Docker Sandboxes into his open-source AI agent-building tool, capping a whirlwind six weeks since the project's launch. Cohen built NanoClaw in a weekend as a secure alternative to OpenClaw, using just 500 lines of code compared to OpenClaw's 800,000. The project exploded after AI researcher Andrej Karpathy praised it on X, garnering 22,000 GitHub stars and 4,600 forks. Cohen has since shut down his AI marketing startup, which was on track for $1 million in annual recurring revenue, to launch NanoCo around the project. The company plans to offer commercial services including forward deployed engineers to help companies build secure AI agents, though specific monetisation plans remain under development. VCs are already calling, Cohen says.