Product Engineer - Vault
California, Moniteau County, Missouri, 65018, USA
Listed on 2026-02-23
-
Software Development
AI Engineer
About WorkOS
WorkOS builds tools and services for developers to help them implement authentication, identity, authorization, and overall enterprise readiness. We’re a fully distributed team with employees across North American time zones. We’re well-funded, having raised $100m in funding from top investors including Greenoaks Capital, Lachy Groom, and Lightspeed Ventures. Our fast-growing customer base includes rapidly growing SaaS companies like OpenAI, Cursor, Perplexity, Vercel, Plaid, and hundreds of others.
Aboutthe role
The Vault team is responsible for building and scaling WorkOS Vault, our developer-friendly encryption key management and secret storage product. Vault enables applications to encrypt, segment, and optionally store highly sensitive data—tokens, passwords, certificates, PII, API keys, files—backed by enterprise-grade encryption and key management infrastructure. The vision for Vault is to make cryptography simple and fast, and the product currently serves tens of millions of encryption requests each day.
On this team you’ll work on building reliable, high-throughput systems, defining new abstractions for developer-friendly encryption, and crafting APIs that both scale and stay simple. We’re looking for Engineers to join this team that are motivated by solving deep security and infrastructure problems, owning high-impact systems end-to-end, and working closely with customers to deliver robust products,
ResponsibilitiesArchitect and implement systems for real-time encryption, secure storage, key-rotation, and data revocation across multi-tenant applications
Build deep domain expertise around encryption key management (EKM), envelope encryption, BYOK (Bring Your Own Key), and context-based key isolation
Work closely with enterprise customers to understand their compliance, key control, and security requirements—and translate that into features (e.g., key segmentation, audit logs, cryptographic deletion)
Collaborate cross-functionally with other product teams (e.g., Auth Kit, Radar), solutions engineering, and GTM to ensure Vault integrates seamlessly into the broader platform
On greenfield opportunities: explore new features such as field-level encryption, e2e encryption, broader HSM integrations, client-side SDK enhancements
Help recruit, mentor, and grow the engineering team around Vault’s roadmap
5+ years of industry software development experience
Experience working on small teams in fast-paced environments
Background in building systems that solve for security, encryption, storage, multi-tenant data isolation, or large-scale data platforms
Intellectually curious, independently driven, and passionate about great products
A growth mindset, high emotional intelligence, and strong communication skills
Bonus:
Experience with our stack of Type Script, React, and PostgresBonus:
Experience in B2B SaaS, developer tools, or a related industry
Benefits (US Only):
Competitive pay
Substantial equity grants
Healthcare insurance (Medical, Dental and Vision) for you and your family
401k matching
Wellness and fitness monthly allowances
PTO + paid holidays + unlimited sick leave
Autonomy and flexibility with remote work
WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
#J-18808-Ljbffr(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).