Senior Software Engineer – Proactive Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Create, develop, and manage paved paths for privileged access, secrets management, and identity.

• Develop self-service tools, SDKs, Terraform modules, and integrations for on-demand access, temporary credentials, and dynamic secrets.

• Design and manage highly available distributed systems that support tier-0 services.

• Lead efforts to transition away from long-lived credentials and permanent access.

• Collaborate with Core Infrastructure, Compute, Data, and product engineering teams.

• Integrate paved paths within Kubernetes, CI/CD, and AWS and GCP environments for DoorDash, Wolt, and Deliveroo.

• Participate in a follow-the-sun on-call rotation for tier-0 security services.

• Enhance monitoring, runbooks, incident response, and root cause analysis processes.

• Facilitate the secure adoption of AI tools and agentic workflows through effective access control and secrets management.

• Report directly to the Manager of the Proactive Security Engineering Platform team.

⛳️ Requirements

• Over 6 years of experience as a Software, Infrastructure, or Security Platform Engineer within an internet scale organization.

• A Bachelor's degree in Computer Science, Security Engineering, a related discipline, or equivalent professional experience.

• Proficient software engineering skills in Go, Kotlin, Java, or Python.

• Experience in developing production services and developer tools.

• Practical experience in building or managing access management and secret storage systems, including PAM, secrets management, or key management platforms.

• Strong understanding of distributed systems, encompassing replication, consistency, and distributed consensus mechanisms like Raft or Paxos.

• Familiarity with identity and authentication protocols such as OIDC, SAML, mTLS, and workload identity, including SPIFFE, AWS IAM Roles, or GCP Workload Identity.

• Proficient with Kubernetes, Terraform or other infrastructure as code tools, and AWS and/or GCP IAM.

• Proven history of developing internal platforms or paved paths embraced by other engineers.

• Experience maintaining highly available, no-downtime services with established on-call practices.

• Excellent verbal and written communication skills, with the ability to promote adoption across engineering teams.

🏝️ Benefits

• Opportunities for equity grants.

• 401(k) plan with employer matching.

• 16 weeks of paid parental leave.

• Wellness benefits.

• Commuter benefits match.

• Flexible paid time off/vacation for salaried positions.

• 80 hours of paid sick leave annually for salaried roles.

• Medical, dental, and vision coverage.

• 11 paid holidays.

• Disability insurance.

• Basic life insurance.

• Assistance for family formation.

• Mental health programs.

• Premium healthcare options.

• Wellness expense reimbursement.

• Support for applicants requiring accommodations.