Senior Linux Distribution Engineer — Software Supply Chain Security

RAPIDFORT is seeking a deeply technical Linux Distribution Engineer to enhance their software supply chain security. The role involves managing Linux package ecosystems and container images, ensuring secure software delivery, and collaborating with various engineering teams to improve software validation and distribution processes.

Responsibilities:

• Own end-to-end vulnerability remediation across Linux package ecosystems and container images
• Analyze CVEs affecting OS packages, runtimes, libraries, and transitive dependencies across multiple Linux distributions
• Validate upstream fixes, evaluate patch applicability, and determine appropriate remediation strategies
• Rebuild, backport, patch, curate, sign, and publish packages across multiple Linux distribution branches
• Maintain and manage trusted package repositories across diverse Linux ecosystems
• Resolve complex dependency, compatibility, and ABI issues across distributions and package versions
• Ensure package and image updates do not break customer environments, builds, or runtime compatibility
• Design and scale automated pipelines for package rebuilding, validation, remediation, signing, publishing, and image generation
• Integrate package validation, repository management, and remediation workflows into pipelines
• Generate and maintain SBOMs, package metadata, provenance data, and trusted software artifacts
• Improve image performance, package footprint, startup efficiency, and operational reliability
• Research emerging threats and best practices in Linux distributions, containers, Kubernetes, and software supply chain security

Requirements:

• 5+ years of experience in Linux systems engineering, Linux distribution engineering, platform engineering, DevSecOps, release engineering, or SRE
• Deep expertise in Linux distributions and package ecosystems
• Strong experience with Linux package build systems and tooling including rpmbuild, dpkg-buildpackage, APKBUILD/abuild, and associated repository and release tooling
• Strong hands-on experience with Linux package managers including dpkg/apt, rpm/yum/dnf, apk, and associated repository tooling
• Proven experience rebuilding, patching, backporting, maintaining, or publishing Linux packages across distribution versions
• Strong understanding of package repositories, dependency resolution, ABI compatibility, package signing, and release workflows
• Experience identifying and remediating vulnerabilities within Linux packages and containerized environments
• Deep understanding of container internals, Linux, namespaces, and runtime behavior
• Strong scripting or programming skills in Bash, C/C++, Python, Go, and other languages
• Experience building CI/CD automation for package validation, remediation, release, and repository management workflows
• Familiarity with software supply chain security concepts including SBOMs, provenance, signing, and artifact trust
• Strong troubleshooting skills across Linux systems, package ecosystems, dependency graphs, and build pipelines
• Experience maintaining or contributing to Linux distributions or open source package ecosystems
• Experience with package build infrastructure such as mock, Koji, OBS, Launchpad, or similar systems
• Experience building minimal, distroless, or hardened container images
• Familiarity with SBOM tooling and standards
• Familiarity with SLSA, reproducible builds, or software supply chain security frameworks
• Contributions to open source infrastructure, Linux packaging, or container ecosystem projects