Senior Software Engineer – Secrets Management, PKI

This is a fully remote position, open to applicants in California.

📋 Description

• Design and implement enterprise-level secrets management solutions utilizing HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault.

• Develop and maintain Public Key Infrastructure (PKI) systems, which include certificate lifecycle management, certificate authority operations, and cryptographic key management.

• Architect secure credential rotation mechanisms and automated provisioning workflows.

• Collaborate with security, infrastructure, and application teams to integrate secrets management and PKI solutions.

• Conduct security audits and vulnerability assessments on secrets management and PKI implementations.

• Create documentation, runbooks, and best-practice guides.

• Troubleshoot complex issues associated with certificate management, key storage, and credential access.

• Remain up-to-date with security threats, cryptographic standards, and industry best practices.

• Mentor junior engineers and contribute to security-centric engineering practices.

• Ensure adherence to regulatory requirements and organizational security policies.

⛳️ Requirements

• A minimum of 5 years of professional software engineering experience with an emphasis on infrastructure and security systems.

• At least 3 years of hands-on experience with secrets management platforms such as HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or similar.

• Strong proficiency in Public Key Infrastructure (PKI), certificate management, and X.509 standards.

• In-depth knowledge of cryptographic concepts, encryption protocols, and secure key management practices.

• Experience with Hardware Security Modules (HSMs) and the integration of cryptographic hardware.

• Solid programming abilities in Go, Python, Java, or C++.

• Comprehensive understanding of identity and access management (IAM) principles and practices.

• Familiarity with infrastructure-as-code tools and automation frameworks.

• Strong analytical and problem-solving skills with a keen attention to detail.

• Excellent communication skills with the ability to work effectively across both technical and non-technical teams.

• Experience with cloud-native security architectures and containerized environments.

• Knowledge of security compliance frameworks such as FIPS 140-2, SOC 2, ISO 27001.

• Understanding of certificate transparency and OCSP (Online Certificate Status Protocol).

• Experience in security incident response and forensics.

• Contributions to open-source security projects or communities.

• Familiarity with CI/CD pipeline security and secrets scanning tools.

• Understanding of zero-trust security models and their implementation.

🏝️ Benefits

• Employees have the flexibility to work remotely.

• Collaborate with a world-class, distributed team dedicated to openness and technical excellence.

• Build the observability foundation for the AI cloud era, working directly with leading GPU cloud operators, NeoClouds, sovereign clouds, and AI-first enterprises.

• Shape the product narrative and influence go-to-market success.