Lead Software Engineer - (Secrets Manager & AI Identity)

Bitwarden
United States
Workplace: RemoteFull timeFunction: Software EngineeringExperience: 10-15 yearsSkills: ["Collaboration","Problem-solving","Written documentation","Adaptability","Outcome-driven feedback"]

Lead end-to-end development of privileged access gateway services for Bitwarden’s Secrets Manager & AI Identity team. Own secure, audited terminal access controls, session recording mechanics, and resilient APIs that decouple the PAM tenant from core infrastructure. Collaborate with Product and Design through an embedded trio, build automated test and CI/CD pipelines, and steward production reliability via telemetry, on-call, and postmortems. Help produce secure-by-default patterns and open-source developer documentation.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Bitwarden
Bitwarden
2 days ago

Lead Software Engineer - (Secrets Manager & AI Identity)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Lead end-to-end development of privileged access gateway services for Bitwarden’s Secrets Manager & AI Identity team. Own secure, audited terminal access controls, session recording mechanics, and resilient APIs that decouple the PAM tenant from core infrastructure. Collaborate with Product and Design through an embedded trio, build automated test and CI/CD pipelines, and steward production reliability via telemetry, on-call, and postmortems. Help produce secure-by-default patterns and open-source developer documentation.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Design, develop, test, deploy, and operate secure gateway controls, audited terminal logins, and session recording mechanics for PAM.
  • •Maintain strict service boundaries and build resilient APIs so the PAM platform can run as an independent, decoupled tenant on core infrastructure.
  • •Collaborate with a co-located “Embedded Trio” (Product, Design, Engineering) to design and validate solutions before implementation.
  • •Build and maintain automated test suites, integration harnesses, and CI/CD pipelines to remove manual testing barriers.
  • •Own production operational health via reliability/performance telemetry, participate in on-call rotations, and drive postmortem analyses.

Key Requirements

  • •10–15 years as a software engineer with team lead experience.
  • •Strong proficiency in AI-led development using C#/.NET, Rust, or TypeScript.
  • •Experience designing/implementing secure gateway architectures and reverse proxies, including session proxying (SSH, RDP, or HTTPS).
  • •Understanding of identity and access management, key-rotation protocols, and real-time audit logging systems.
  • •Experience with containerized environments (Docker/Kubernetes), automated tests (unit/integration/e2e), and SRE/observability tools (APM, alerting, telemetry dashboards).
Experience:10-15 yearsSecurityIdentity and access managementPAMSecrets managementOpen sourceSRE/observability
Skills:CollaborationProblem-solvingWritten documentationAdaptabilityOutcome-driven feedback
Languages:English
Tech Stack:C#.NETRustTypeScriptAI-led developmentDockerKubernetesUnit testsIntegration testsEnd-to-end testsCI/CDAPMAlertingTelemetry dashboardsReverse proxiesSSHRDPHTTPSIdentity and access managementKey rotation

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Bitwarden
Develops Bitwarden, an open-source password management platform providing secure vaults, password generation, and cross-device syncing for individuals and businesses, with self-hosting and cloud-hosted deployment options and enterprise access controls.
Industry: Cybersecurity
Headquarters: Santa Barbara, United States
Founded: 2016
WebsiteLinkedIn