Senior Software Engineer II - Key Management Systems

Digital Ocean
Bengaluru
Workplace: HybridFull timeFunction: Software EngineeringExperience: 6+ yearsSkills: ["Mentoring","Collaboration","Communication","Ownership","Incident response"]

Own end-to-end key management workstreams for a security-critical KMS platform, designing and operating high-availability services. Lead key generation, rotation, escrow, and destruction workflows with strong correctness guarantees and audit trails. Build and scale envelope encryption across storage, databases, and inference workloads while driving compliance engineering for FIPS 140-2 and SOC 2. Harden key-management flows, improve reliability, and mentor IC2 engineers.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Digital Ocean
Digital Ocean
1 day ago

Senior Software Engineer II - Key Management Systems

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Own end-to-end key management workstreams for a security-critical KMS platform, designing and operating high-availability services. Lead key generation, rotation, escrow, and destruction workflows with strong correctness guarantees and audit trails. Build and scale envelope encryption across storage, databases, and inference workloads while driving compliance engineering for FIPS 140-2 and SOC 2. Harden key-management flows, improve reliability, and mentor IC2 engineers.
Location: Bengaluru
Workplace: Hybrid
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Design and build high-availability, security-critical key management services in Go with end-to-end ownership from design through production operations.
  • •Lead key lifecycle engineering, including key generation, rotation, escrow, and destruction workflows with correctness guarantees and audit trail requirements.
  • •Design and scale DEK/KEK envelope encryption across storage, databases, and inference workloads with clean key isolation boundaries.
  • •Drive compliance engineering for FIPS 140-2 and SOC 2 by implementing audit logging, key material handling policies, and cryptographic algorithm governance.
  • •Harden key management flows by remediating security vulnerabilities, improve reliability and performance, lead incident response/postmortems, and mentor IC2 engineers.

Pay and Benefits

Equity and Bonus:Equity
Perks:Employee AssistanceLearning BudgetFlexible Time

Key Requirements

  • •6+ years of software engineering experience, including 2-3 years focused on cryptographic systems, key management, or security-critical distributed services.
  • •Strong proficiency in Go and solid understanding of gRPC microservices architecture.
  • •Hands-on experience with HSMs or cloud KMS services (AWS KMS, GCP Cloud KMS, HashiCorp Vault, Thales/Luna, or equivalent).
  • •Applied cryptography depth, including correct usage of primitives such as AES-GCM, RSA, ECDSA, HMAC, HKDF, and PBKDF2.
  • •Experience with Kubernetes, MySQL (SQL), Infrastructure as Code (Terraform), and distributed systems concepts (consensus, replication, partitioning).
Experience:6+ yearsCryptographySecurityDistributed systemsCloud securityCompliance
Skills:MentoringCollaborationCommunicationOwnershipIncident response
Languages:English
Tech Stack:GoGRPCKey managementEnvelope encryptionDEKKEKFIPS 140-2SOC 2AES-GCMRSAECDSAHMACHKDFPBKDF2HSMAWS KMSGCP Cloud KMSHashiCorp VaultThales/LunaKubernetes

Company Brief

Digital Ocean
Provides cloud infrastructure and developer-focused cloud services including scalable droplets, managed databases, Kubernetes, object storage, and networking to simplify deploying and managing applications for developers and small-to-medium businesses.
Industry: Cloud Computing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: New York, United States
Founded: 2011
Glassdoor
Glassdoor: 3.8
WebsiteLinkedIn