Chainguard
Software supply chain audits and observability
Senior Solutions Architect - Central, Professional Services
+ Bonus + Equity
Must be located in the Central Time Zone; travel up to 15% is required.
About the job
- Minimum 4+ years of experience in a post-sales role supporting clients.
- 8+ years of experience developing high-performance multi-tier applications, with strong experience in Kubernetes and containers.
- Ability to communicate technical information effectively to highly technical and non-technical audiences, including engineers and executives.
- At least a Bachelor's Degree with a focus in Computer Science, Software Engineering, or Information Technology.
- Strong working experience with software development processes, practices, and software engineering design concepts.
- Ability to work effectively with cross-functional engineering teams and business partners.
- Ability to travel up to 15% of the time.
- Must be located in the Central Time Zone.
- Lead technical implementations and drive adoption of Chainguard Images, helping customers build securely with open source software across their organizations.
- Partner with account executives, sales engineers, customer success managers, and support teams to understand customer vision, pain points, and proposed solutions, and to drive account-level strategies, value realization, and retention or growth.
- Ensure Chainguard Images are of the highest quality by acting as customer zero, testing and documenting them, and ensuring a smooth customer onboarding experience.
- Partner with Product and Engineering teams to convey customer requirements and determine prioritization for image builds.
- Maintain appropriate account-level architecture and share best practices and lessons learned across the organization.
- Collaborate with, teach, and learn from the Chainguard team.
- Continuous learning, a strong intellectual drive for excellence, and a desire to develop solutions to complex problems.
- Excellent written and verbal communication skills.
About the company
Chainguard operates in the software supply chain risk management space. It audits both internal and external supply chains to identify risks, then delivers reports with concrete remediations, improvements, and next steps to reduce exposure. The company also provides a curated base container image distro, Chainguard Image, a ready-to-use, secure software base that simplifies switching to a trusted container ecosystem. Revenue comes from audits and report delivery, plus subscriptions or usage around the curated image distro and related observability services. Chainguard offers supply chain observability, helping customers track what is running, its origin, and dependencies to meet industry standards and frameworks. The goal is to improve the integrity and security of software supply chains for businesses that rely on them, especially those with complex software dependencies.
Company Size
501-1,000
Company Stage
Growth Equity (Venture Capital)
Total Funding
$892M
Headquarters
Kirkland, Washington
Founded
2021
Get referred to Chainguard
See people who can refer or advise you
Simplify's Take
What believers are saying
- September 3, 2026: Chainguard surpassed 1 billion container build manifests, doubling in six months.
- Sovereign Artifacts beta now stores EU artifact bytes, unlocking regulated banking and defense deals.
- Creationline, JFrog, and AWS partnerships broaden distribution across Japan, developer tooling, and procurement.
What critics are saying
- AWS Security Hub Extended launched August 4, 2026, bundling Chainguard with Socket.
- Public registries and scanners commoditize trust claims, squeezing pricing across libraries and images.
- If Athena stalls, Chainguard loses its security moat and becomes another container vendor.
What makes Chainguard unique
- Chainguard Factory rebuilds packages from source, delivering signed provenance and SBOMs.
- Athena processed 40,000 vulnerabilities in July 2026, pairing disclosure, fixes, and mitigations.
- Commercial Builds launched March 17, 2026, extending Chainguard’s hardened-image model to vendors.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Equity/stock options
Unlimited Paid Time Off
Remote Work Options
Home Office Stipend
Health Insurance
Wellness Program
Growth & Insights and Company News
6 month growth
↑ 0%1 year growth
↑ 2%2 year growth
↑ 7%Announcing the Sovereign Artifacts beta. Zayn Lohit Senior Product Manager + 1 other Today, Chainguard is announcing Sovereign Artifacts to help global organizations secure their software supply chains locally. With upcoming 2027 mandates like the EU Cloud and AI Development Act (CADA) requiring critical software to run in-region, sovereignty has shifted from a best practice to an explicit infrastructure requirement. Its customers in banking and defense who also needed a secure and verified supply chain to comply with the Cyber Resilience Act (CRA) and the Digital Operational Resilience Act (DORA), while building for data sovereignty across their global teams. To do this right, teams need localized artifacts from build to delivery, which has historically been notoriously difficult. Chainguard is changing that with the first local option for Chainguard's secure open source artifacts. This beta marks the first milestone on its sovereignty roadmap, allowing customers to store container and library artifact bytes within an EU jurisdiction and pull them locally. Align with upcoming sovereignty frameworks. Sovereign Artifacts supports DORA and CRA due diligence by reducing the risk of service, because local access can't be disrupted while solving EU data residency and CADA Level 1 by storing and serving artifact bytes in the EU. Phase 1 covers artifact byte storage, which addresses where the data physically resides. Authentication and build pipelines are still hosted in the U.S., and the following phases are intended to close that gap. Chainguard is actively investing in a complete sovereignty solution and looking for design partners to help inform and accelerate its roadmap. Sovereign Artifacts also delivers a performance boost for European customers. Historically, transatlantic network latency has made EU pulls 1.7 to 2.2 times slower than U.S. pulls. Moving these artifact bytes closer to local infrastructure eliminates that network lag and reduces pull times by 30%. How to join the beta. Enabling sovereign artifact byte storage may require a firewall config change to allow R2 bucket addresses to successfully pull artifacts. Once configured, Chainguard automatically backfills your artifacts to EU storage. Enrolled users then pull artifacts through their existing client workflows. Reach out today or contact your account team to join.
Apiiro expands open source security with Chainguard Athena coalition. August 6, 2026 Apiiro has joined Chainguard's Athena coalition and is offering its AI-powered AutoFix tool free to open-source maintainers, helping accelerate vulnerability remediation as AI-driven threats continue to grow. Apiiro has joined Chainguard's Athena coalition and is making its AI-powered AutoFix tool available free of charge to open-source maintainers, reinforcing community efforts to defend open-source software against AI-powered attacks. As part of the collaboration, Apiiro and Chainguard are integrating their platforms to automate vulnerability prioritisation and remediation. The move enables open-source maintainers to generate contextual code fixes faster while helping organisations identify and address vulnerabilities that pose the greatest business risk. Athena has already processed more than 40,000 AI-discovered vulnerabilities, coordinating ecosystem-wide responses to emerging AI-driven threats. Apiiro joins coalition members including J.P. Morgan, Morgan Stanley, Cisco, Cloudflare, Akamai and Qualys in expanding the industry's collaborative defence of open-source software. Apiiro's Guardian Agent contributes newly discovered vulnerabilities to the Athena community while notifying customers when coalition findings affect their software. It prioritises vulnerabilities based on software architecture, runtime exposure and business impact, then uses AutoFix to generate contextual fixes, validate them through automated testing and create review-ready pull requests. Apiiro also integrates Chainguard's remediation status into its Risk Graph, allowing organisations to focus on vulnerabilities relevant to their own software. "The challenge is fixing vulnerabilities quickly without disrupting business-critical applications. By joining Athena, we are bringing organizations the context they need to understand which vulnerabilities actually affect their software architecture, which pose a real risk to the business, and how to fix them automatically without breaking their software. AI alone does not secure software. Context does," said Idan Plotnik, Co-Founder and CEO of Apiiro. The integration is available immediately for joint Apiiro and Chainguard customers, while open-source maintainers can now request free access to AutoFix.
Chainguard joins AWS Security Hub Extended to strengthen open source Supply Chain security. August 5, 2026 Chainguard has launched the Chainguard Libraries service via AWS Security Hub Extended as a partner in the new Supply Chain category, thereby allowing AWS customers to bolster software supply chain security through the use of malware-free, secure-by-default replacement packages for any public open source dependencies. This will allow companies to avoid getting compromised open source packages into their development, CI/CD, and production environments in light of the rising threat posed by more and more sophisticated malware that utilizes artificial intelligence. Unlike most scanning tools, which only find out about threats after the malicious packages have been distributed, Chainguard rebuilds open source packages from trusted source code in an isolated environment called the Chainguard Factory. Supply Chain Management Through AWS Security Hub Extended, customers can purchase Chainguard Libraries using existing AWS contracts, consolidate billing, access centralized security findings using the Open Cybersecurity Schema Framework (OCSF), and receive unified Level 1 support for Enterprise Support plans. The integration is designed to reduce procurement complexity while improving visibility and protection against software supply chain threats without disrupting developer productivity. "Open source is the foundation the world's software is built on. When that ecosystem gets compromised, the blast radius is enormous," said Patrick Donahue, Senior Vice President of Product, Chainguard. "AWS adding us as a partner for supply chain security with the Extended plan is a real signal that the industry is treating this problem with the seriousness it deserves. Chainguard delivers that protection to customers with open source that's trustworthy by default."
Chainguard has joined AWS Security Hub Extended as a partner in its new Supply Chain category. The integration allows AWS customers to access Chainguard Libraries, which replaces public open source dependencies with malware-free packages rebuilt from verified source code. The partnership addresses rising threats from compromised open source packages. According to Chainguard, over 98% of malware ships as pre-built packages with no matching source code, often spreading globally before detection. Through AWS Security Hub Extended, customers can purchase Chainguard Libraries using existing AWS contracts with Enterprise Discount Program discounts applied. Each package is rebuilt from verified source in Chainguard's SLSA Level 3 build environment and delivered with signed provenance and software bills of materials. Chainguard customers include Anduril, Canva, OpenAI, Snap, and Snowflake. The company is backed by investors including Sequoia Capital, Lightspeed Venture Partners, and Kleiner Perkins.
Apiiro has joined Chainguard's Athena coalition to combat AI-driven vulnerabilities in open source software. The company is making its AutoFix tool free for open source maintainers and integrating its platform with Chainguard's. Athena has processed more than 40,000 AI-discovered vulnerabilities. The coalition includes J.P. Morgan, Morgan Stanley, Cisco, Cloudflare, Akamai, and Qualys. Apiiro CEO Idan Plotnik said frontier AI models are discovering novel vulnerabilities at unprecedented speed. The company's platform uses software architecture, runtime exposure, and business context to help organisations prioritise and fix vulnerabilities without disrupting production environments. The integration allows Apiiro to reflect Chainguard's remediation status in its Risk Graph whilst evaluating findings against customer software architecture.