Senior Software Engineer I - Key Management Systems

Digital Ocean
Bengaluru
Workplace: HybridFull timeFunction: Software EngineeringExperience: 4-7 yearsSkills: ["Collaboration","Communication","Mentoring","Security-mindedness","Reliability focus"]

Own end-to-end development of DigitalOcean’s Key Management Systems (KMS) security platform. Design and build high-availability, security-critical key management services in Go, lead key lifecycle workflows, and advance envelope encryption for data at rest. Drive FIPS 140-2 and SOC 2 compliance into engineering design, harden systems against complex vulnerabilities, and improve reliability through incident response and postmortems. Mentor fellow engineers while collaborating across IAM, Storage, Databases, and Inference.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Digital Ocean
Digital Ocean
1 month ago

Senior Software Engineer I - Key Management Systems

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 14 hours agoStatus: Live

Job Summary

Own end-to-end development of DigitalOcean’s Key Management Systems (KMS) security platform. Design and build high-availability, security-critical key management services in Go, lead key lifecycle workflows, and advance envelope encryption for data at rest. Drive FIPS 140-2 and SOC 2 compliance into engineering design, harden systems against complex vulnerabilities, and improve reliability through incident response and postmortems. Mentor fellow engineers while collaborating across IAM, Storage, Databases, and Inference.
Location: Bengaluru
Workplace: Hybrid
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Design and build high-availability, security-critical key management services in Go with end-to-end ownership from design through production operations.
  • •Lead key lifecycle engineering including key generation, rotation, escrow, and destruction workflows with correctness guarantees and required audit trails.
  • •Design and scale the DEK/KEK hierarchy for envelope encryption across Storage, Databases, and Inference workloads with clean key isolation boundaries.
  • •Drive FIPS 140-2 and SOC 2 compliance requirements into engineering design, including audit logging and key material handling and algorithm governance.
  • •Harden key management systems by identifying and remediating complex security vulnerabilities, and improve reliability via incident response and postmortems while mentoring engineers through code reviews and design feedback.

Pay and Benefits

Equity and Bonus:Equity
Perks:Flexible TimeEquityLearning Budget

Key Requirements

  • •4–7 years of software engineering experience, including 1–2 years focused on cryptographic systems, key management, or security-critical distributed services.
  • •Strong proficiency in Go and solid understanding of gRPC microservices architecture.
  • •Working knowledge of applied cryptographic primitives (AES-GCM, RSA, ECDSA, HMAC) and correct usage of key derivation functions (HKDF, PBKDF2).
  • •Hands-on experience with HSMs or cloud KMS services (AWS KMS, GCP Cloud KMS, HashiCorp Vault, Thales/Luna).
  • •Familiarity with FIPS 140-2 constraints and SOC 2 (or similar audit frameworks) as they apply to key management.
Experience:4-7 yearsCryptographySecurityDistributed systemsCloud nativeHSMKMS
Skills:CollaborationCommunicationMentoringSecurity-mindednessReliability focus
Languages:English
Tech Stack:GoGRPCKMSHSMEnvelope encryptionDEK/KEKFIPS 140-2SOC 2AES-GCMRSAECDSAHMACHKDFPBKDF2AWS KMSGCP Cloud KMSHashiCorp VaultThales/LunaKubernetesMySQL

Company Brief

Digital Ocean
Provides cloud infrastructure and developer-focused cloud services including scalable droplets, managed databases, Kubernetes, object storage, and networking to simplify deploying and managing applications for developers and small-to-medium businesses.
Industry: Cloud Computing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: New York, United States
Founded: 2011
Glassdoor
Glassdoor: 3.8
WebsiteLinkedIn