Principal Software Engineer, Privileged Access Management

Principal Engineer — PAM Platform

This role is on the PAM Platform team, building the next generation of PAM infrastructure that runs across multi‑tenant SaaS, customer‑managed deployments, and federal Gov Cloud environments. We are a distributed, AI‑first R&D organization, actively rolling out an AI‑Driven Development Lifecycle (AiDLC) as our SDLC of record.

• Drive technical strategy and architecture across PAM platform components, including federal‑compliant deployment topologies
• Partner with Product and Engineering Management on requirements analysis, roadmap planning, and technical decision‑making
• Lead end‑to‑end design and delivery of new services from greenfield through production hardening
• Operate within and help shape our AiDLC workflow: living specs, AI‑generated implementations, property‑based and integration testing as blocking gates, and audit‑tracked human approvals
• Author and maintain the engineering contracts (CLAUDE.md, prompt libraries, agent skills, code standards) that govern how AI‑driven development happens on the platform
• Conduct deep code reviews on critical and security‑sensitive changes — including AI‑generated code
• Mentor senior, staff, and associate principal engineers; raise the technical bar across the team
• Debug, optimize, and refactor existing services as we evolve toward multi‑tenant, multi‑cloud, federal‑ready
• Serve as a technical expert for internal teams and, when needed, customer‑facing escalations

• 10+ years of software engineering experience with demonstrated ownership of complex system design, implementation, and technical decision‑making
• Track record of taking systems from design through production at scale, including multi‑tenant SaaS

• Hands‑on experience building security‑focused systems — Privileged Access Management, Identity Governance, Authentication, Secrets Management, or adjacent domains
• Required knowledge of FedRAMP, FIPS 140‑3, and Gov Cloud (AWS Gov Cloud or Azure Government) — what they constrain, why, and how to design within them
• Working knowledge of modern cryptography in practice: TLS/mTLS, KMS‑backed key hierarchies, envelope encryption, HSM/key vault integration

• Go strongly preferred as the platform’s primary language; deep proficiency in at least one systems/services language (Go, Rust, C++, Java, or similar) is required
• Polyglot capability — you can read, reason about, and contribute across multiple languages, and you can defend language‑choice decisions on technical merit
• Frontend literacy in Type Script/React is a plus

• Solid hands‑on Kubernetes experience — EKS or equivalent, Helm, manifests, operators, day‑2 operations. Not “I used kubectl apply once.”
• Cloud platform proficiency on AWS or Azure; multi‑cloud experience is a plus
• Microservices and API design: REST, gRPC/Protobuf, and the trade‑offs between them
• Experience with event‑driven architectures (message buses, async workflows) — you know when to reach for them and when not to
• Workflow orchestration experience (Temporal or similar) is a plus
• Relational database design at scale — PostgreSQL preferred; schema‑per‑tenant or comparable isolation patterns are a plus

• Strong testing discipline: unit, integration, end‑to‑end, and property‑based testing
• Infrastructure as Code:
  Terraform, Helm;
  Git Ops (ArgoCD) a plus
• CI/CD pipeline design and ownership — Git Lab, Git Hub Actions, Jenkins, Cloud Bees, or equivalent
• Observability:
  Open Telemetry, structured logging, metrics, tracing
• Containerization:
  Docker multi‑stage builds, distroless/minimal runtimes

• Active, deliberate use of AI coding tools (Claude Code, Cursor, Copilot, or comparable) as part of your daily workflow — beyond autocomplete
• Comfort working in a spec‑driven, agent‑assisted development model with mandatory verification gates;
  AiDLC will be our SDLC, and we expect candidates to embrace and help refine it
• Critical‑review instincts: you don’t ship AI‑generated code without reading it, testing it, and understanding it

• Demonstrated experience mentoring engineers and leading technical…