Software Engineer II - Key Management Systems

Digital Ocean
Bengaluru
Workplace: HybridFull timeFunction: Software EngineeringExperience: 2-4 yearsSkills: ["Code correctness","Problem-solving","Systems thinking","Communication","Collaboration"]

Build and extend DigitalOcean’s security-critical Key Management Systems (KMS), implementing features and bug fixes in Go across key lifecycle services. Work on key generation, rotation, and revocation workflows, write rigorous unit/integration tests, and participate in on-call with runbooks and production investigations. Support envelope encryption (DEK/KEK hierarchies), collaborate across IAM, Storage, and Database teams, and grow your expertise in applied cryptography, HSM integration, and compliance.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Digital Ocean
Digital Ocean
1 month ago

Software Engineer II - Key Management Systems

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 14 hours agoStatus: Live

Job Summary

Build and extend DigitalOcean’s security-critical Key Management Systems (KMS), implementing features and bug fixes in Go across key lifecycle services. Work on key generation, rotation, and revocation workflows, write rigorous unit/integration tests, and participate in on-call with runbooks and production investigations. Support envelope encryption (DEK/KEK hierarchies), collaborate across IAM, Storage, and Database teams, and grow your expertise in applied cryptography, HSM integration, and compliance.
Location: Bengaluru
Workplace: Hybrid
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Implement features and bug fixes across DigitalOcean key management services in Go, following established architectural patterns.
  • •Work on key generation, rotation, and revocation workflows with reliable, well-tested implementations.
  • •Participate in code reviews and write comprehensive unit and integration tests for security-sensitive code.
  • •Participate in on-call rotations, investigate production issues, write runbooks, and develop operational ownership.
  • •Implement envelope encryption logic, including DEK wrapping/unwrapping using KEK hierarchies, translating defined requirements into tested code.

Pay and Benefits

Equity and Bonus:Equity

Key Requirements

  • •2–4 years of software engineering experience building and shipping production services.
  • •Proficiency in Go, or strong background in another typed systems language with ability to ramp quickly.
  • •Understanding of core cryptographic concepts (symmetric vs asymmetric encryption, key derivation, hashing) and interest in applied cryptography.
  • •Understanding of distributed systems fundamentals (replication, latency trade-offs, failure modes) with awareness of security-critical correctness.
  • •Experience with containerized environments (Kubernetes) and SQL databases (Postgres, mySQL); Terraform experience is a plus.
Experience:2-4 yearsSecurityCloudDistributed systemsCryptographyProduction services
Skills:Code correctnessProblem-solvingSystems thinkingCommunicationCollaboration
Languages:English
Tech Stack:GoKubernetesPostgresMySQLTerraformAWS KMSGCP Cloud KMSHashiCorp VaultHSMFIPS 140-2AES-GCMRSAECDSAGRPCEnvelope encryptionDEKKEKHSM integrationSOC 2

Company Brief

Digital Ocean
Provides cloud infrastructure and developer-focused cloud services including scalable droplets, managed databases, Kubernetes, object storage, and networking to simplify deploying and managing applications for developers and small-to-medium businesses.
Industry: Cloud Computing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: New York, United States
Founded: 2011
Glassdoor
Glassdoor: 3.8
WebsiteLinkedIn