STACKIT Platform Services - Secrets Manager & KMS - Software Engineer (m/f/d)
Schwarz Group2 months ago
Barcelona, SpainSenior
Responsibilities
- Design and develop the Key Management Service, including secure key generation, lifecycle management, key rotation, and cryptographic operations.
- Implement envelope encryption and manage Data Encryption Keys and Key Encryption Keys for layered security.
- Develop Kubernetes operators to automate the lifecycle of the KMS and Secrets Manager and support self-healing, scalability, and configuration.
- Build and maintain APIs for key-ring management, external-key imports, and signing and verification workflows.
- Own the full software development lifecycle in a “You Build It - You Run It” environment.
- Ensure cryptographic operations follow standards including AES, RSA, ECDSA, and HMAC and provide required audit trails.
- Analyze data flows, API body sizes, cryptographic overhead, performance bottlenecks, and cost efficiency.
Requirements
- Strong enthusiasm for software engineering, applied cryptography, and cloud-native security.
- Experience with Go and Kubernetes; Kubernetes operator development is preferred.
- Familiarity with or willingness to learn AES-GCM, RSA-OAEP, ECDSA, secure key wrapping, and key transport.
- Understanding of auditing and compliance requirements for secrets management in high-stakes cloud environments.
- Ability to understand system data flows and optimize API and cryptographic performance.
- Interest in security standards and willingness to share technical knowledge with the team.
Benefits
- Work on digital sovereignty and secure cloud infrastructure in Europe.
- Fast decision-making processes and genuine creative freedom in projects.
- Stable foundation of the Schwarz Group with opportunities to support internal and external customers.
- Location: Neckarsulm, Germany.
Tech Stack
Categories
About Schwarz Group
Schwarz Group is a German retail group that owns and operates the Lidl and Kaufland grocery chains, plus production and waste-management businesses (Schwarz Produktion and PreZero). Through its digital arm Schwarz Digits it builds and runs IT, cloud, data, and security services for its brands and external clients, and offers retail media solutions via Schwarz Media. Headquartered in Neckarsulm, it is privately held and active across Europe and beyond.