Lead Product Engineer; Key Management & Confidential Computing) Engineering Hybrid remote

As Lead Product Engineer for Key Management & Confidential Computing, you are the technical owner and hands‑on builder of enclaive’s next‑generation vHSM Key and Workload Identity Management Service. You combine deep engineering expertise with pragmatic technical leadership — setting architectural direction, driving engineering quality, and mentoring a small but highly skilled team while actively contributing production code. You will initially spend the majority of your time building core platform capabilities (approx.

80% hands‑on engineering / 20% leadership), gradually evolving into a broader technical leadership role as the team grows.

Why This Role Exists

Confidential computing and secure AI are moving from research into real‑world production — but the industry still lacks trustworthy, developer-friendly infrastructure for managing keys, identities, and secrets in encrypted environments. Today’s security tooling was not designed for confidential workloads running across multi‑cloud platforms, trusted execution environments, and autonomous AI systems.

This role exists to change that.

As Lead Engineer for Key Management & Confidential Computing, you help define the security foundation that enables organizations to run their most sensitive applications — healthcare systems, regulated data platforms, sovereign AI, and critical infrastructure — with strong cryptographic guarantees and verifiable trust.

You bridge the gap between cutting‑edge research and production‑grade engineering, turning advanced cryptography and confidential computing concepts into real systems that developers can build on and enterprises can depend on. Your work lays the technical groundwork for a new generation of secure‑by‑default cloud infrastructure — where privacy, integrity, and trust are built into the platform itself, not bolted on later.

By shaping this core technology, you directly influence how secure digital infrastructure evolves in Europe and beyond — enabling innovation without compromising sovereignty, data protection, or user trust.

What We Offer

• core security product in a cutting‑edge domain
• Lead, train and build a team
• Opportunity to shape confidential cloud and AI security infrastructure
• Small, highly technical team with real impact and autonomy
• Flexible working model and engineering-driven culture
• Direct collaboration with founders and deep technical influence on the roadmap
• Work with cutting‑edge technology in confidential computing, secure AI, and multi‑cloud security only few “geeks” currently know about

What you'll be doing

• Own the end‑to‑end product lifecycle — architecture, development, release, maintenance, and evolution
• Design and implement secure key management capabilities for confidential cloud and AI workloads
• Extend and maintain a vHSM‑based platform tailored for confidential computing environments
• Collaborate closely with founders, engineers, and product stakeholders to define roadmap and priorities
• Build production‑grade features including:
  • Secrets and key lifecycle management
  • Access control and identity integration
  • Hardware‑backed security and confidential computing integrations
  • Secure APIs and automation interfaces
• Drive secure‑by‑design development practices
  , threat modeling, and code reviews
• Improve reliability, scalability, and performance of the service
• Establish CI/CD pipelines, testing strategies, and release processes
• Support customer deployments, troubleshooting, and technical enablement when needed
• Contribute to architectural decisions around confidential cloud infrastructure and AI security

What you'll add to enclaive

• Strong hands‑on backend or platform engineering experience
  • Must: 8+ years Golang
  • Typescript/Java script, Rust are valuable
• Experience with KMS, HSMs, PKI, or…