Senior Software Engineer I - Key Management Systems
DigitalOcean2 months ago
Bengaluru, IndiaMid Level / Senior
Responsibilities
- Design and build highly available, security-critical key management services in Go from architecture through production operation.
- Own key generation, rotation, escrow, destruction, correctness guarantees, and audit trail workflows.
- Design and scale DEK/KEK envelope encryption hierarchies for Storage, Databases, and Inference workloads.
- Incorporate FIPS 140-2, SOC 2, audit logging, key material handling, and cryptographic algorithm governance into system design.
- Identify and remediate vulnerabilities including side-channel exposure and privilege escalation paths.
- Improve KMS reliability and performance and lead incident response and postmortems for security-sensitive events.
- Mentor IC2 engineers through code reviews and design feedback.
Requirements
- 4–7 years of software engineering experience, including 1–2 years focused on cryptographic systems, key management, or security-critical distributed services.
- Strong proficiency in Go and solid understanding of gRPC microservices architecture.
- Working knowledge of AES-GCM, RSA, ECDSA, HMAC, HKDF, PBKDF2, and correct applied cryptography practices.
- Hands-on experience with HSMs or cloud KMS services such as AWS KMS, GCP Cloud KMS, HashiCorp Vault, or Thales/Luna.
- Understanding of FIPS 140-2 requirements and familiarity with SOC 2 or other audit frameworks.
- Understanding of consensus, replication, and partitioning in distributed systems.
- Hands-on experience with Kubernetes, SQL/MySQL, and Terraform.
- Experience collaborating across teams and communicating security trade-offs to technical and non-technical stakeholders.
- Nice-to-have experience with AWS Secrets Manager, PKCS#11, KMIP, BYOK, CMEK, or customer-managed secrets.
Benefits
- Hybrid work arrangement in Bengaluru, India.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning courses.
- Employee Assistance Program, local employee meetups, and flexible time off.
- Bonus eligibility, equity compensation, and Employee Stock Purchase Program.
About DigitalOcean
DigitalOcean is the AI-Native Cloud purpose-built for the inference and agentic era. Its five-layer integrated platform—spanning GPU and CPU infrastructure, core cloud, inference, data, and managed agent orchestration—is open throughout with no vendor lock-in, giving builders everything they need to start fast, scale production AI workloads, and improve unit economics. More than 650,000 customers and millions of developers globally trust DigitalOcean to build, ship, and scale their applications.