Senior Software Engineer (Security)

Mirantis • Campbell, CA

8d

About The Position

Mirantis is seeking a Senior Software Engineer specializing in Secrets Management and Public Key Infrastructure (PKI) to design, develop, and maintain secure systems that protect sensitive credentials and cryptographic assets. The role focuses on building robust, scalable, and compliant secrets management and PKI solutions, including certificate lifecycle management, certificate authority operations, cryptographic key management, credential rotation, and automated provisioning. The engineer will integrate these solutions across the organization, assess their security, document operational practices, troubleshoot complex issues, and help advance security-focused engineering practices. The position is based in Campbell, United States; the posting also includes the hashtag #remote.

Requirements

• At least 5 years of professional software engineering experience focused on infrastructure and security systems.
• At least 3 years of hands-on experience with secrets management platforms such as HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or equivalent.
• Strong expertise in PKI, certificate management, and X.509 standards.
• Proficiency in cryptographic concepts, encryption protocols, and secure key management practices.
• Experience with Hardware Security Modules (HSMs) and cryptographic hardware integration.
• Programming skills in languages such as Go, Python, Java, or C++.
• Deep understanding of identity and access management (IAM) principles and practices.
• Experience with infrastructure-as-code tools and automation frameworks.
• Strong analytical and problem-solving skills and meticulous attention to detail.
• Excellent communication skills and ability to work effectively across technical and non-technical teams.

Nice To Haves

• Experience with cloud-native security architectures and containerized environments.
• Familiarity with security compliance frameworks such as FIPS 140-2, SOC 2, and ISO 27001.
• Knowledge of certificate transparency and OCSP (Online Certificate Status Protocol).
• Experience with security incident response and forensics.
• Contributions to open-source security projects or communities.
• Experience with CI/CD pipeline security and secrets scanning tools.
• Understanding of zero-trust security models and their implementation.

Responsibilities

• Design and implement enterprise-grade secrets management solutions using platforms such as HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault.
• Develop and maintain PKI systems, including certificate lifecycle management, certificate authority operations, and cryptographic key management.
• Architect secure credential rotation mechanisms and automated provisioning workflows.
• Collaborate with security, infrastructure, and application teams to integrate secrets management and PKI solutions.
• Conduct security audits and vulnerability assessments of secrets management and PKI implementations.
• Develop documentation, runbooks, and best-practice guides for secrets management and PKI operations.
• Troubleshoot and resolve issues related to certificate management, key storage, and credential access.
• Stay current with security threats, cryptographic standards, and industry best practices in secrets management and PKI.
• Mentor junior engineers and contribute to security-focused engineering practices.
• Ensure compliance with regulatory requirements and organizational security policies.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed