Senior Software Engineer I - Key Management Systems

📋 Description

• Own Technical Workstreams: Design and build secure KMS in Go.
• Drive key lifecycle: design generation, rotation, escrow, and destruction with audit trails.
• Advance envelope encryption: scale DEK/KEK for data at rest across services.
• Build for compliance: integrate FIPS 140-2 and SOC 2 into design, including audit logging.
• Proactively harden systems: identify and remediate vulnerabilities in KMS flows.
• Operational excellence: improve reliability and performance; lead incident postmortems.

🎯 Requirements

• Experience: 4–7 years software engineering; 1–2 years in cryptographic systems.
• Language: Strong proficiency in Go and gRPC.
• Cryptography depth: AES-GCM, RSA, ECDSA, HMAC, HKDF, PBKDF2 knowledge.
• HSM & KMS: Hands-on with HSMs or cloud KMS services.
• Compliance familiarity: Understanding of FIPS 140-2 and SOC 2.
• Cloud Native: Kubernetes, MySQL, Terraform.

🎁 Benefits

• Career development: conference reimbursements, training, and LinkedIn Learning access.
• Well-being: Employee Assistance Program, local meetups, flexible time off.
• Compensation: market-based base salary, bonus potential, equity grants.
• Equal opportunity: DigitalOcean is an equal-opportunity employer.