Senior Software Engineer, Security

This is a fully remote position, open to applicants in California.

📋 Description

• Design and deploy enterprise-level secrets management solutions utilizing HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault.

• Create and sustain Public Key Infrastructure (PKI) systems, encompassing certificate lifecycle management, certificate authority operations, and cryptographic key management.

• Engineer secure credential rotation systems and automated provisioning processes.

• Partner with security, infrastructure, and application teams to incorporate secrets management and PKI solutions.

• Perform security audits and vulnerability assessments on secrets management and PKI implementations.

• Generate documentation, runbooks, and best practice manuals.

• Resolve complex issues related to certificate management, key storage, and credential access.

• Remain informed about emerging security threats, cryptographic standards, and industry best practices.

• Guide junior engineers and contribute to security-focused engineering methodologies.

• Ensure adherence to regulatory requirements and organizational security policies.

⛳️ Requirements

• Over 5 years of professional software engineering experience with an emphasis on infrastructure and security systems.

• More than 3 years of practical experience with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or similar).

• In-depth knowledge of Public Key Infrastructure (PKI), certificate management, and X.509 standards.

• Proficient in cryptographic concepts, encryption protocols, and secure key management methodologies.

• Experience with Hardware Security Modules (HSMs) and integration of cryptographic hardware.

• Strong programming capabilities in languages such as Go, Python, Java, or C++.

• Comprehensive understanding of identity and access management (IAM) principles and practices.

• Familiarity with infrastructure-as-code tools and automation frameworks.

• Excellent analytical and problem-solving abilities with a keen attention to detail.

• Strong communication skills, capable of collaborating effectively with both technical and non-technical teams.

• Experience with cloud-native security architectures and container-based environments.

• Knowledge of security compliance frameworks (FIPS 140-2, SOC 2, ISO 27001).

• Understanding of certificate transparency and OCSP (Online Certificate Status Protocol).

• Experience in security incident response and forensics.

• Contributions to open-source security projects or communities.

• Familiarity with CI/CD pipeline security and secrets scanning tools.

• Knowledge of zero-trust security models and their implementation.

🏝️ Benefits

• Employees have the option to work remotely.

• Collaborate with a top-tier, distributed team dedicated to transparency and technical excellence.

• Influence the product narrative and contribute to go-to-market success.