Senior Software Engineer I
DigitalOcean18 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Design and build highly available, security-critical key management services in Go from design through production operation.
- Lead key lifecycle workflows covering key generation, rotation, escrow, destruction, correctness guarantees, and audit trails.
- Design and scale DEK/KEK envelope-encryption hierarchies for Storage, Databases, and Inference workloads.
- Incorporate FIPS 140-2, SOC 2, audit logging, key material handling, and cryptographic algorithm governance into engineering designs.
- Identify and remediate vulnerabilities including side-channel exposure and privilege escalation in key access APIs.
- Improve KMS reliability and performance and lead incident response and postmortems for security-sensitive production events.
- Mentor IC2 engineers through code reviews and design feedback in applied cryptography and security engineering.
Requirements
- 4–7 years of software engineering experience, including 1–2 years focused on cryptographic systems, key management, or security-critical distributed services.
- Strong proficiency in Go and a solid understanding of gRPC microservices architecture.
- Working knowledge of AES-GCM, RSA, ECDSA, HMAC, HKDF, and PBKDF2, including their correct application.
- Hands-on experience with HSMs or cloud KMS services such as AWS KMS, GCP Cloud KMS, HashiCorp Vault, or Thales/Luna.
- Understanding of FIPS 140-2 requirements and familiarity with SOC 2 or comparable audit frameworks for key management.
- Understanding of consensus, replication, and partitioning for distributed systems operating under failure conditions.
- Hands-on experience with Kubernetes, SQL/MySQL, and Terraform.
- Ability to collaborate across IAM, Storage, Databases, and Inference teams and communicate security trade-offs to technical and non-technical stakeholders.
- Preferred experience with AWS Secrets Manager, PKCS#11, KMIP, or customer-facing encryption products such as BYOK and CMEK.
Benefits
- Hybrid role located in Bengaluru, India.
- Flexible time off, local team meetups, and mental health and well-being support, with benefits varying by location.
- Reimbursement for relevant conferences, training, and education subject to company policy.
- Eligible non-sales employees may participate in an annual bonus plan and may receive a new-hire equity grant, subject to plan terms and local eligibility.
- Eligible employees in participating countries may have access to an Employee Stock Purchase Program.
Tech Stack
Categories
About DigitalOcean
DigitalOcean provides cloud infrastructure and platform services for developers, startups, and small to mid-sized businesses, including virtual machines (Droplets), managed Kubernetes and databases, object/block storage, networking, and GPUs for AI workloads. It operates a usage-based, self-service public cloud with APIs, CLI, and a marketplace to deploy and scale applications. Founded in 2012 and headquartered in Broomfield, Colorado, DigitalOcean is a public company listed on the NYSE.