Staff Software Engineer-Security Products

Digital Ocean
Bengaluru
Workplace: HybridFull timeFunction: Software EngineeringExperience: 10+ yearsSkills: ["Technical leadership","Architectural design","Cross-functional communication","Mentorship","Organizational influence"]

Lead the technical direction for Security Products, spanning IAM, KMS, CSPM, and ISPM. Define an architecture where identity, cryptographic key management, and posture signals integrate coherently, and drive cross-domain platform decisions for real-time authorization and compliance evidence. Own security standards adoption (e.g., OIDC/SAML/SCIM, OAuth token exchange, KMIP, PKCS#11) and mentor engineers while partnering with compliance and executive leadership to shape multi-year strategy for an AI-native cloud security platform.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Digital Ocean
Digital Ocean
1 day ago

Staff Software Engineer-Security Products

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Lead the technical direction for Security Products, spanning IAM, KMS, CSPM, and ISPM. Define an architecture where identity, cryptographic key management, and posture signals integrate coherently, and drive cross-domain platform decisions for real-time authorization and compliance evidence. Own security standards adoption (e.g., OIDC/SAML/SCIM, OAuth token exchange, KMIP, PKCS#11) and mentor engineers while partnering with compliance and executive leadership to shape multi-year strategy for an AI-native cloud security platform.
Location: Bengaluru
Workplace: Hybrid
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Own multi-year Security Products architecture across IAM, KMS, CSPM, and ISPM so systems compose coherently rather than operating in isolation.
  • •Define agent identity and trust architecture for non-human workloads, including identity validation/governance, credential issuance, scoped JWT attestation, and policy engine design.
  • •Make cross-domain platform decisions about how key material binds to identity assertions, how CSPM findings drive access policy enforcement, and how ISPM signals propagate into authorization.
  • •Shape posture strategy by defining how posture risk is discovered, evaluated, and remediated, and integrating posture signals into adaptive policy enforcement.
  • •Drive engineering standards adoption across security products and mentor IC3/IC4 engineers while partnering with compliance and executive leadership.

Pay and Benefits

Equity and Bonus:Equity
Perks:EquityLearning BudgetFlexible Time

Key Requirements

  • •10+ years of software engineering, including 5+ years focused on security-critical systems across at least two domains such as IAM, cryptographic systems/KMS, cloud security posture, or infrastructure security.
  • •Expert-level proficiency in Go building and operating security-critical, high-scale distributed services in production.
  • •Deep knowledge of identity protocols (OIDC, OAuth2, SAML, SCIM) and access control models (RBAC, ABAC, PBAC), including designing workload/agent identity.
  • •Strong applied cryptography fundamentals, including symmetric/asymmetric primitives and envelope encryption patterns, with a track record of correct cryptographic system design under operational constraints.
  • •Experience designing or operating CSPM or ISPM systems at scale, including resource discovery, policy evaluation, and risk signal aggregation.
Experience:10+ years
Skills:Technical leadershipArchitectural designCross-functional communicationMentorshipOrganizational influence
Languages:English
Tech Stack:GoOIDCSAMLSCIMOAuth2OAuth Token ExchangeSPIFFESPIREWIMSEKMIPPKCS#11Open Policy Agent (OPA)RegoDigitalOceanAWSGCPAzureNIST CSF

Company Brief

Digital Ocean
Provides cloud infrastructure and developer-focused cloud services including scalable droplets, managed databases, Kubernetes, object storage, and networking to simplify deploying and managing applications for developers and small-to-medium businesses.
Industry: Cloud Computing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: New York, United States
Founded: 2011
Glassdoor
Glassdoor: 3.8
WebsiteLinkedIn