22 hours ago
Remote, United StatesSenior
Responsibilities
- Design and implement enterprise-grade secrets management solutions.
- Develop and maintain PKI systems, including certificate lifecycle management, certificate authority operations, and cryptographic key management.
- Architect credential rotation mechanisms and automated provisioning workflows.
- Integrate secrets management and PKI solutions across security, infrastructure, and application teams.
- Conduct security audits and vulnerability assessments.
- Create documentation, runbooks, and best-practice guides for secrets management and PKI operations.
- Troubleshoot issues involving certificate management, key storage, and credential access.
- Monitor emerging security threats, cryptographic standards, and industry practices.
- Mentor junior engineers and contribute to security-focused engineering practices.
- Support compliance with regulatory requirements and organizational security policies.
Requirements
- At least 5 years of professional software engineering experience focused on infrastructure and security systems.
- At least 3 years of hands-on experience with secrets management platforms such as HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or equivalent.
- Strong expertise in PKI, certificate management, and X.509 standards.
- Proficiency in cryptographic concepts, encryption protocols, and secure key management.
- Experience with Hardware Security Modules and cryptographic hardware integration.
- Programming experience with Go, Python, Java, or C++.
- Strong understanding of IAM principles and practices.
- Experience with infrastructure-as-code tools and automation frameworks.
- Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
- Preferred: experience with cloud-native security architectures and containerized environments.
- Preferred: familiarity with FIPS 140-2, SOC 2, and ISO 27001.
- Preferred: knowledge of certificate transparency and OCSP.
- Preferred: experience with security incident response and forensics.
- Preferred: contributions to open-source security projects or communities.
- Preferred: experience with CI/CD pipeline security and secrets scanning tools.
- Preferred: understanding of zero-trust security models and their implementation.
Benefits
- Remote role, as indicated by the #remote posting tag.
- Work with a distributed team committed to openness and technical excellence.
- Opportunity to work with GPU cloud operators, NeoClouds, sovereign clouds, and AI-first enterprises.
- Opportunity to influence product narrative and go-to-market success.
About Mirantis
Mirantis builds Kubernetes-native infrastructure software and services for enterprises to run cloud, container, and AI workloads across on-premises, public cloud, and edge environments. It sells subscriptions, support, and managed services around products like Mirantis Kubernetes Engine and the Lens Kubernetes platform; the company acquired Docker Enterprise in 2019. Founded in 1999 and headquartered in Campbell, California, Mirantis is privately held and an IREN company serving global enterprises.