STACKIT Platform Services - Secrets Manager & KMS - Software Engineer (m/f/d)

2 hours ago

Barcelona, SpainSenior

Responsibilities

Design and develop the Key Management Service, including secure key generation, lifecycle management, key rotation, and cryptographic operations.
Implement envelope encryption and manage Data Encryption Keys and Key Encryption Keys for layered security.
Develop Kubernetes operators to automate the lifecycle of the KMS and Secrets Manager and support self-healing, scalability, and configuration.
Build and maintain APIs for key-ring management, external-key imports, and signing and verification workflows.
Own the full software development lifecycle in a “You Build It - You Run It” environment.
Ensure cryptographic operations follow standards including AES, RSA, ECDSA, and HMAC and provide required audit trails.
Analyze data flows, API body sizes, cryptographic overhead, performance bottlenecks, and cost efficiency.

Strong enthusiasm for software engineering, applied cryptography, and cloud-native security.
Experience with Go and Kubernetes; Kubernetes operator development is preferred.
Familiarity with or willingness to learn AES-GCM, RSA-OAEP, ECDSA, secure key wrapping, and key transport.
Understanding of auditing and compliance requirements for secrets management in high-stakes cloud environments.
Ability to understand system data flows and optimize API and cryptographic performance.
Interest in security standards and willingness to share technical knowledge with the team.

Work on digital sovereignty and secure cloud infrastructure in Europe.
Fast decision-making processes and genuine creative freedom in projects.
Stable foundation of the Schwarz Group with opportunities to support internal and external customers.
Location: Neckarsulm, Germany.

11-50 employees