Principal Security Software Engineer, PKI and Secrets Management

Description

This senior role sets the cyber security strategy for new technology, highly complex features, and major changes to current, new, or large programs.

You will guide execution teams technically as they build and integrate systems, track new security technology and competing products, and set the company's direction in this area.

You will promote shared best practices across the cyber security community and help the team by taking part in hiring, including writing technical questionnaires, reviewing resumes, and interviewing candidates.

You may also work on projects that could qualify for patent applications, and you may be given other related duties.

Responsibilities

• Design, build, and maintain security software components, services, and tools used across the company's application ecosystem.
• Build automation frameworks and internal platforms so product teams can adopt secure patterns for identity, authorization, secrets management, and logging with less effort.
• Add security controls and checks to CI/CD pipelines, build systems, and cloud-native deployment workflows.
• Design and build resilient, scalable security services and APIs, such as authentication, authorization, policy evaluation, and event ingestion.
• Work with application, infrastructure, and platform engineering teams to put security requirements into system and service designs.
• Run secure code reviews, threat models, and design reviews to find and fix vulnerabilities early in the software development lifecycle.
• Build and maintain security telemetry, including logging, metrics, and alerts, that supports detection, triage, and incident response.
• Take part in incident response and post-incident reviews as the engineering owner for security services and tooling.
• Track emerging threats, vulnerabilities, and technologies, and turn them into concrete engineering requirements, patterns, and roadmaps.
• Mentor other software engineers on secure coding, design patterns, and security architecture.

Requirements

• A bachelor's degree or higher in computer science, software engineering, cybersecurity, or a related technical field, or equivalent practical experience.
• At least 7 years of experience as a software engineer who has built and owned production systems or internal applications.
• Advanced skill in at least one modern language such as Python, Go, Java, or C++, with a solid grasp of data structures, algorithms, and design patterns.
• Experience using AI-assisted development tools such as GitHub Copilot or Cursor in your daily engineering work.
• Experience designing, implementing, and running services on AWS, Azure, or GCP, including managed services and infrastructure as code.
• Hands-on experience with containers and orchestration, such as Docker and Kubernetes.
• A working understanding of security concepts in software engineering: PKI, including certificate issuance and management; encryption in transit and at rest; and key and secrets management.
• Knowledge of secure coding, input validation, and common vulnerability classes such as injection, XSS, CSRF, and insecure direct object references.
• Experience working with security and audit or compliance teams and turning their requirements into engineering work.
• A record of planning and managing Agile work and owning features and services from design through production.
• Clear written and verbal communication, including the ability to explain identity and security concepts to technical and non-technical audiences.
• Preferred: Extensive experience designing and running PKI and cryptographic services at enterprise scale.
• Preferred: Experience modernizing and automating security platforms so many engineering teams can adopt them.
• Preferred: A track record of technical leadership, setting direction, and influencing across organizations.
• Preferred: A strategic thinker and advocate for change who balances security with business needs.
• Preferred: Strong integrity, accountability, and communication skills.

Conditions

This role is remote. You may live anywhere in the country of work and are not expected to report to a company site unless your manager asks you to.

The company does not provide immigration sponsorship for this role. Do not apply if you will need company immigration sponsorship now or later, including direct sponsorship, the company acting as employer of record on a government form, or any work authorization that requires a written submission or other immigration support from the company, such as H1-B, OPT, STEM OPT, CPT, TN, or J-1.

Base pay is a good faith estimate based on what a successful applicant might earn under applicable state law. The offer will depend on job-related factors and the candidate's location. The base salary range is $201,600 - 309,900.

Bonus potential comes from an incentive pay program based on company performance, job level, and individual performance.

You may be asked to complete a role-related assessment and or a pre-employment screening before you start.

The company is committed to equal employment opportunity and an inclusive workplace free of unlawful discrimination.

Benefits

• Health and wellbeing benefits, including medical, dental, and vision coverage, a Health Savings Account, and Flexible Spending Accounts.
• A retirement savings plan, sickness and accident benefits, and life insurance.
• Paid vacation and holidays, tuition assistance, and an employee assistance program.
• Discounts on company vehicles and other benefits.
• Relocation benefits for candidates who qualify under company policy.