Sr. Engineer - Full Stack - HCP Packer

About the team

At HashiCorp, our mission is to provide infrastructure automation and security solutions that empower organizations to provision, secure, connect, and run any infrastructure for any application. HCP Packer is a modern evolution of Packer, one of HashiCorp’s original open-source tools and a foundational solution in the infrastructure space for building machine images.

HCP Packer brings the power of image automation to the cloud, offering a managed experience that simplifies the lifecycle of machine image creation, versioning, governance, and consumption. With features like image ancestry tracking, version metadata management, and image revocation, HCP Packer enables platform and security teams to scale image pipelines with confidence.

The HCP Packer team is building a robust SaaS offering tightly integrated with the broader HashiCorp Cloud Platform. We empower teams to manage secure, compliant image pipelines and support evolving needs around vulnerability management, Software Bill of Materials (SBOMs), and compliance frameworks like SLSA (Supply Chain Levels for Software Artifacts).

As we modernize Packer and expand its ecosystem, we’re looking for strong engineers who thrive on solving complex challenges, balancing system performance and user experience, and collaborating across functions to build secure, scalable solutions for our global customer base.

What you’ll do (responsibilities)

• You will support and add new features and improvements to HCP Packer.
• Design, build, and maintain scalable APIs and distributed backend services for HCP Packer, ensuring resilience, security, and performance at scale.
• Collaborate closely with teams to build cohesive, end-to-end workflows that support artifact management, lifecycle automation, and vulnerability remediation.
  Lead or contribute to new feature development efforts, such as image ingestion pipelines, automated CVE scanning and reporting, SBOM management, and image provenance tooling.
• Write production-grade Golang code and actively participate in design reviews, code reviews, and architectural discussions.
• Contribute to the overall developer and customer experience through documentation, tooling, and thoughtful UX/API design.
• Engage in discovery and experimentation to explore new integrations, workflow patterns, and enterprise needs—publishing findings via RFCs and participating in solution validation.
• Operate and monitor production systems as part of our on-call rotation, using observability tooling to proactively identify and resolve issues.
• Help drive a culture of technical excellence, security-first development, and continuous learning within the team and across the organization.

What you'll need (basic qualifications)

• You have experience running, testing, and contributing to one (or more) of the following: a frontend application (JavaScript or JavaScript frameworks, such as Ember.js, React), distributed services (Go or similar).
• Experience operating production systems in cloud environments (e.g., AWS, GCP, or Azure), with a strong grasp of distributed systems, performance tuning, and observability.
• You have experience working with distributed systems, particularly on a cloud provider such as AWS, Azure, or GCP, with a focus on scalability, resilience, and security.
• Emerging ability to direct work and influence others, with a strategic approach to problem-solving and decision-making in a collaborative environment.
• You have experience operating and maintaining production systems in a Linux and public cloud environment.
• You have a strong Software Engineering or DevOps background, with 5+ years of related experience.
• Familiarity with Packer, Terraform, or related IaC tools.
• You are familiar with infrastructure management concepts and ecosystem.
• You are familiar with secure software integration mechanisms.
• You have experience in education, customer support, or OSS community support applicable to the Terraform community.
• You are familiar with infrastructure management concepts and tools (infrastructure as code, software-defined networking, virtualization, and the tools used to operate and maintain related systems).
• Experience or interest in vulnerability management (CVEs), SBOMs, supply chain security (e.g., SLSA), and compliance automation is a strong plus.
• A growth mindset with curiosity for learning new technologies and a proactive approach to driving innovation and continuous improvement.

Individual pay within the range will be determined based on job related-factors such as skills, experience, and education or training.

“HashiCorp is an IBM subsidiary which has been acquired by IBM and will be integrated into the IBM organization. HashiCorp will be the hiring entity. By proceeding with this application you understand that HashiCorp will share your personal information with other IBM subsidiaries involved in your recruitment process, wherever these are located. More information on how IBM protects your personal information, including the safeguards in case of cross-border data transfer, are available here: link to IBM privacy statement.”