Full-Time

Software Engineer 2

Platform

Stacklok

Stacklok

11-50 employees

Provides software supply chain security tools

Compensation Overview

$157.5k - $192.5k/yr

+ Equity

La Ronge, SK, Canada

Remote

Must work core hours in the Eastern Time Zone (ET).

Category
Software Engineering (1)
Required Skills
Kubernetes
Docker
Go
REST APIs

Get referred to Stacklok

See people who can refer or advise you

Requirements
  • Proficiency in Go, writing clean, testable code that accounts for edge cases and error handling.
  • Working knowledge of Kubernetes and container technologies such as Docker, including isolation and networking, ideally in self-hosted environments.
  • Demonstrated ability to deliver features independently across a backend or platform codebase, from implementation through testing and into a release.
  • Experience building or operating platform services such as APIs, gateways, Kubernetes operators, or release and deployment tooling.
  • Demonstrated ability to write clear design docs and give thoughtful code reviews that raise the quality of shared work.
  • Comfort collaborating in an open source environment. Familiarity with MCP or AI-agent infrastructure is a plus.
  • AI-first mindset: integrates AI tools into their development workflow to accelerate delivery and improve the quality of what they build.
  • Communication: excellent written and verbal communication, able to explain complex technical ideas clearly to technical and non-technical audiences.
  • Startup mentality and intrinsic motivation: self-directed and hands-on, thrives in fast-moving, ambiguous environments and drives clarity through action.
Responsibilities
  • Build and deliver features across the platform services that make up Stacklok Enterprise, including the runtime, Kubernetes operator, gateway, and registry.
  • Fix bugs and harden platform systems for enterprise production use, improving stability across customer deployments.
  • Write testable, readable code that accounts for edge cases and error handling, and produce clear design docs for the work you take on.
  • Review pull requests and contribute to design discussions, working alongside technical leads, product, and fellow engineers on shared platform efforts.
  • Plan and sequence your own tasks and small epics independently, knowing when to pull in a teammate or escalate a design question.
  • Contribute to the open source ToolHive codebase and collaborate with community contributors on shared work.
Desired Qualifications
  • Proficiency in Go, writing clean, testable code that accounts for edge cases and error handling.
  • Working knowledge of Kubernetes and container technologies such as Docker, including isolation and networking, ideally in self-hosted environments.
  • Demonstrated ability to deliver features independently across a backend or platform codebase, from implementation through testing and into a release.
  • Experience building or operating platform services such as APIs, gateways, Kubernetes operators, or release and deployment tooling.
  • Demonstrated ability to write clear design docs and give thoughtful code reviews that raise the quality of shared work.
  • Comfort collaborating in an open source environment. Familiarity with MCP or AI-agent infrastructure is a plus.
  • AI-first mindset: integrates AI tools into their development workflow to accelerate delivery and improve the quality of what they build.
  • Communication: excellent written and verbal communication, able to explain complex technical ideas clearly to technical and non-technical audiences.
  • Startup mentality and intrinsic motivation: self-directed and hands-on, thrives in fast-moving, ambiguous environments and drives clarity through action.

Stacklok provides Trusty, a free web app and VS Code extension for software supply chain security. It analyzes public GitHub activity to generate a Trusty Score that helps gauge repository trustworthiness and uses Sigstore for Package Provenance to verify package authenticity. It also offers AI-powered Package Recommendations to suggest safer dependencies and continuously checks that packages are signed. The goal is to help developers and open-source communities make safer dependency choices and improve the integrity of software.

Company Size

11-50

Company Stage

Series A

Total Funding

$17.5M

Headquarters

Seattle, Washington

Founded

2023

Get referred to Stacklok

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • June 13, 2026 podcast coverage signals continued founder visibility and recruiting leverage.
  • March 18, 2026 MCP Optimizer cut per-request tokens 60-85% in vMCP deployments.
  • SUSECON 2026 integrated Stacklok into vetted MCP registries alongside AWS and n8n.

What critics are saying

  • Trusty stayed experimental on January 22, 2025, delaying clear enterprise monetization.
  • Stacklok's product shift from packages to MCP vetting dilutes focus and confuses buyers.
  • If free Trusty and tooling never convert, 2027 funding dries up and Stacklok shrinks.

What makes Stacklok unique

  • Craig McLuckie and Joe Beda pair Kubernetes pedigree with Luke Hinds' sigstore roots.
  • Trusty indexes millions of packages across Go, Java, JavaScript, Rust, and Python.
  • Stacklok now vets MCP servers, extending supply-chain trust into AI agent infrastructure.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Flexible Work Hours

Hybrid Work Options

Growth & Insights and Company News

Headcount

6 month growth

10%

1 year growth

5%

2 year growth

10%
PR Newswire
Mar 20th, 2024
45 New Members Join The Cloud Native Computing Foundation

As the community convenes at KubeCon + CloudNativeCon Europe in Paris, CNCF welcomes continued investment from organizations around the worldPARIS, March 20, 2024 /PRNewswire/ -- KubeCon + CloudNativeCon Europe – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, announced today that 45 new members have joined the Foundation. Together with hundreds of organizations spanning continents and industries, these new members will help drive cloud native innovation to respond to the diverse and pressing challenges organizations face."Every quarter it is inspiring to see the number of diverse organizations who are contributing to and leveraging cloud native technologies, and who endeavor further involvement with the community," said Chris Aniszczyk, CTO of the CNCF. "Without the investment from these forward-thinking companies, we would not be able to achieve what we have thus far in building an incredible ecosystem around Kubernetes, responding to challenges we didn't even know existed when we started in 2015. We look forward to working together with these new members."About the newest Silver Members:8gears Container Registry is a Harbor-based container image management solution provided and operated by the respective project's maintainer and contributors.Container Registry is a Harbor-based container image management solution provided and operated by the respective project's maintainer and contributors. AOE 's Cloud & DevOps expertise enhances your IT through advanced Kubernetes consulting, offering knowledge transfer, training, operations, and implementation services, enabling you to adeptly manage container orchestration and future-proof your business.'s Cloud & DevOps expertise enhances your IT through advanced Kubernetes consulting, offering knowledge transfer, training, operations, and implementation services, enabling you to adeptly manage container orchestration and future-proof your business. Apollo GraphQL is the maker of Apollo GraphOS , a platform that enables API platform teams to connect their APIs and deliver a self-service graph that can power any number of applications.is the maker of , a platform that enables API platform teams to connect their APIs and deliver a self-service graph that can power any number of applications

Stacklok
Jan 23rd, 2024
Get to know Shanis Windland, Stacklok's new Chief Operating Officer

Shanis Windland joined Stacklok's leadership team in January 2024 as its Chief Operating Officer.

Stacklok
Nov 15th, 2023
How to use Trusty in Visual Studio Code to flag risky open source libraries

Last week, Stacklok announced the launch of Trusty, a free-to-use service that helps developers make safer dependency choices.

FinSMEs
May 19th, 2023
Stacklok Raises $17.5M in Series A Funding

Stacklok, a Seattle, WA-based provider of open-source software supply chain security solutions, raised $17.5M in Series A funding.

Business Wire
May 18th, 2023
Stacklok Announces $17.5 million Series A To Secure the Supply Chain of Software Deployment

Stacklok announces $17.5 million Series A to Secure the Software Supply Chain; Madrona and Accel back Open-Source Visionaries