Senior Principal Software Engineer - Secrets Managment

Responsibilities

• Design and build secure backend services that store, manage, rotate, and deliver secrets, keys, certificates, and related sensitive materials.
• Improve key exchange mechanisms so software services can securely communicate, establish trust, and protect sensitive information in transit and at rest.
• Make secret rotation safer and more automated, reducing service breakage, manual handling, and unsafe credential storage patterns.
• Build reliable APIs, tooling, and workflows that help other engineering teams adopt secrets and key‑management capabilities with less friction.
• Improve availability, scalability, monitoring, alerting, and operational safety for security‑critical production systems.
• Lead threat modeling, security reviews, design hardening, and sensitive‑data exposure analysis across service boundaries.
• Partner with application, infrastructure, identity, and security teams to make secret management more consistent across the company.
• Own production quality through incident response, debugging, operational improvements, resiliency work, and reduction of manual operations.
• Lead complex projects independently, drive alignment across teams, mentor engineers, and raise the engineering bar for security‑sensitive systems.

• Deep experience designing and operating distributed backend services in production at meaningful scale.
• Strong security engineering judgment across access control, encryption, identity, trust boundaries, key management, certificate lifecycle, and failure modes.
• Experience building reliable APIs, automation, and developer‑facing infrastructure used by multiple engineering teams.
• Operational excellence in observability, incident response, reliability engineering, scalability, and safe production change management.
• Ability to lead ambiguous technical programs, make durable architecture decisions, influence across teams, and mentor engineers.
• Comfort working with application, infrastructure, identity, and security partners on high‑trust, security‑sensitive systems.
• Practical experience with threat modeling, security reviews, hardening, and production risk reduction for sensitive‑data systems.