Senior Software Engineer (Security)

Description

The company is hiring a Senior Software Engineer focused on secrets management and Public Key Infrastructure (PKI). The role is based in Campbell, United States, and you would design, build and run secure systems that protect sensitive credentials and cryptographic assets across the organization, making sure they are sturdy, scalable and aligned with recognized security standards.

The company is the Kubernetes-native AI infrastructure arm of IREN, providing platforms for scalable, secure and sovereign infrastructure. The team is distributed and works in the open.

Responsibilities

• Design and implement enterprise-grade secrets management solutions on platforms such as HashiCorp Vault, AWS Secrets Manager or Azure Key Vault.
• Build and maintain PKI systems, covering certificate lifecycle management, certificate authority operations and cryptographic key management.
• Design secure credential rotation and automated provisioning workflows that reduce security risk.
• Work with security, infrastructure and application teams to integrate secrets management and PKI across the organization.
• Audit and assess existing secrets management and PKI implementations for vulnerabilities and security gaps.
• Write documentation, runbooks and best-practice guides for secrets management and PKI operations.
• Diagnose and fix complex problems with certificate management, key storage and credential access.
• Track new security threats, cryptographic standards and best practices in secrets management and PKI.
• Mentor junior engineers and help shape security-focused engineering practices.
• Make sure the work meets regulatory requirements and internal security policies.

Requirements

• Required: at least 5 years of professional software engineering experience, focused on infrastructure and security systems.
• Required: at least 3 years of hands-on work with secrets management platforms such as HashiCorp Vault, AWS Secrets Manager, Azure Key Vault or an equivalent.
• Required: strong working knowledge of PKI, certificate management and X.509 standards.
• Required: understanding of cryptographic concepts, encryption protocols and secure key management practices.
• Required: experience with Hardware Security Modules (HSMs) and integrating cryptographic hardware.
• Required: solid programming skills in Go, Python, Java, C++ or a similar language.
• Required: deep understanding of identity and access management (IAM) principles and practice.
• Required: experience with infrastructure-as-code tools and automation frameworks.
• Required: strong analytical and problem-solving skills, with careful attention to detail.
• Required: clear communication with both technical and non-technical colleagues.
• Preferred: experience with cloud-native security architectures and containerized environments.
• Preferred: familiarity with FIPS 140-2, SOC 2 or ISO 27001 compliance frameworks.
• Preferred: knowledge of certificate transparency and OCSP (Online Certificate Status Protocol).
• Preferred: experience with security incident response and forensics.
• Preferred: contributions to open-source security projects or communities.
• Preferred: experience securing CI/CD pipelines and using secrets scanning tools.
• Preferred: understanding of zero-trust security models and how to implement them.

Conditions

Remote work.

Equal opportunity: candidates are considered without regard to protected characteristics.

Applicants submitting a resume consent to the processing and storage of their personal data for current and future openings, and may use automated decision-making tools in evaluation, with the right to opt out and to appeal.

Benefits

• Work on the observability foundation for the AI cloud era, alongside leading GPU cloud operators, NeoClouds, sovereign clouds and AI-first enterprises.
• Join a global team that values openness and technical excellence.
• Help shape the product story and influence go-to-market results.