Digital Ocean

2 days ago

Senior Software Engineer I - Key Management Systems

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Own end-to-end development of DigitalOcean’s Key Management Systems (KMS) security platform. Design and build high-availability, security-critical key management services in Go, lead key lifecycle workflows, and advance envelope encryption for data at rest. Drive FIPS 140-2 and SOC 2 compliance into engineering design, harden systems against complex vulnerabilities, and improve reliability through incident response and postmortems. Mentor fellow engineers while collaborating across IAM, Storage, Databases, and Inference.

Location: Bengaluru

Workplace: Hybrid

Employment Type: Full time

Job Function: Software Engineering

Seniority: Mid level

Key Responsibilities

•Design and build high-availability, security-critical key management services in Go with end-to-end ownership from design through production operations.
•Lead key lifecycle engineering including key generation, rotation, escrow, and destruction workflows with correctness guarantees and required audit trails.
•Design and scale the DEK/KEK hierarchy for envelope encryption across Storage, Databases, and Inference workloads with clean key isolation boundaries.
•Drive FIPS 140-2 and SOC 2 compliance requirements into engineering design, including audit logging and key material handling and algorithm governance.
•Harden key management systems by identifying and remediating complex security vulnerabilities, and improve reliability via incident response and postmortems while mentoring engineers through code reviews and design feedback.

Pay and Benefits

Equity and Bonus:Equity

Perks:Flexible TimeEquityLearning Budget

Key Requirements

•4–7 years of software engineering experience, including 1–2 years focused on cryptographic systems, key management, or security-critical distributed services.
•Strong proficiency in Go and solid understanding of gRPC microservices architecture.
•Working knowledge of applied cryptographic primitives (AES-GCM, RSA, ECDSA, HMAC) and correct usage of key derivation functions (HKDF, PBKDF2).
•Hands-on experience with HSMs or cloud KMS services (AWS KMS, GCP Cloud KMS, HashiCorp Vault, Thales/Luna).
•Familiarity with FIPS 140-2 constraints and SOC 2 (or similar audit frameworks) as they apply to key management.

Experience:4-7 yearsCryptographySecurityDistributed systemsCloud nativeHSMKMS

Skills:CollaborationCommunicationMentoringSecurity-mindednessReliability focus

Languages:English

Tech Stack:GoGRPCKMSHSMEnvelope encryptionDEK/KEKFIPS 140-2SOC 2AES-GCMRSAECDSAHMACHKDFPBKDF2AWS KMSGCP Cloud KMSHashiCorp VaultThales/LunaKubernetesMySQL

Company Brief

Digital Ocean

Provides cloud infrastructure and developer-focused cloud services including scalable droplets, managed databases, Kubernetes, object storage, and networking to simplify deploying and managing applications for developers and small-to-medium businesses.

Industry: Cloud Computing

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York, United States

Founded: 2011

Glassdoor: 3.8

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Digital Ocean

2 days ago

Senior Software Engineer I - Key Management Systems

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Location: Bengaluru

Workplace: Hybrid

Employment Type: Full time

Job Function: Software Engineering

Seniority: Mid level

Key Responsibilities

•Design and build high-availability, security-critical key management services in Go with end-to-end ownership from design through production operations.
•Lead key lifecycle engineering including key generation, rotation, escrow, and destruction workflows with correctness guarantees and required audit trails.
•Design and scale the DEK/KEK hierarchy for envelope encryption across Storage, Databases, and Inference workloads with clean key isolation boundaries.
•Drive FIPS 140-2 and SOC 2 compliance requirements into engineering design, including audit logging and key material handling and algorithm governance.
•Harden key management systems by identifying and remediating complex security vulnerabilities, and improve reliability via incident response and postmortems while mentoring engineers through code reviews and design feedback.

Pay and Benefits

Equity and Bonus:Equity

Perks:Flexible TimeEquityLearning Budget

Key Requirements

•4–7 years of software engineering experience, including 1–2 years focused on cryptographic systems, key management, or security-critical distributed services.
•Strong proficiency in Go and solid understanding of gRPC microservices architecture.
•Working knowledge of applied cryptographic primitives (AES-GCM, RSA, ECDSA, HMAC) and correct usage of key derivation functions (HKDF, PBKDF2).
•Hands-on experience with HSMs or cloud KMS services (AWS KMS, GCP Cloud KMS, HashiCorp Vault, Thales/Luna).
•Familiarity with FIPS 140-2 constraints and SOC 2 (or similar audit frameworks) as they apply to key management.

Experience:4-7 yearsCryptographySecurityDistributed systemsCloud nativeHSMKMS

Skills:CollaborationCommunicationMentoringSecurity-mindednessReliability focus

Languages:English

Tech Stack:GoGRPCKMSHSMEnvelope encryptionDEK/KEKFIPS 140-2SOC 2AES-GCMRSAECDSAHMACHKDFPBKDF2AWS KMSGCP Cloud KMSHashiCorp VaultThales/LunaKubernetesMySQL

Company Brief

Digital Ocean

Industry: Cloud Computing

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York, United States

Founded: 2011

Glassdoor: 3.8

Website LinkedIn