5+ years of software engineering experience focused on infrastructure and security systems
3+ years of hands-on experience with secrets management platforms like HashiCorp Vault or AWS Secrets Manager
Strong expertise in Public Key Infrastructure (PKI) and certificate management
Proficiency in cryptographic concepts and secure key management practices
Experience with Hardware Security Modules (HSMs)
Solid programming skills in languages such as Go, Python, Java, or C++
Deep understanding of identity and access management (IAM) principles
Responsibilities
Design and implement enterprise-grade secrets management solutions
Develop and maintain Public Key Infrastructure (PKI) systems
Architect secure credential rotation mechanisms and automated provisioning workflows
Collaborate with teams to integrate secrets management and PKI solutions
Conduct security audits and vulnerability assessments
Develop documentation and best practice guides for operations
Troubleshoot and resolve complex issues related to certificate management
Benefits
Opportunity to build the observability foundation for the AI cloud era
Collaborate with a world-class, distributed team committed to technical excellence
Influence product narrative and go-to-market success
Full Job Description
Job Description
We're looking for a Senior Software Engineer specializing in Secrets Management and Public Key Infrastructure (PKI) to join our team in Campbell, United States. In this role, you will design, develop, and maintain secure systems that protect sensitive credentials and cryptographic assets across our organization. You'll work on complex infrastructure challenges, ensuring that secrets management and PKI solutions are robust, scalable, and compliant with industry security standards. This is an excellent opportunity for a detail-oriented engineer who is passionate about security and infrastructure excellence.
Design and implement enterprise-grade secrets management solutions using industry-leading platforms such as HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault
Develop and maintain Public Key Infrastructure (PKI) systems, including certificate lifecycle management, certificate authority operations, and cryptographic key management
Architect secure credential rotation mechanisms and automated provisioning workflows to minimize security risks
Collaborate with security, infrastructure, and application teams to integrate secrets management and PKI solutions across the organization
Conduct security audits and vulnerability assessments of existing secrets management and PKI implementations
Develop comprehensive documentation, runbooks, and best practice guides for secrets management and PKI operations
Troubleshoot and resolve complex issues related to certificate management, key storage, and credential access
Stay current with emerging security threats, cryptographic standards, and industry best practices in secrets management and PKI
Mentor junior engineers and contribute to the development of security-focused engineering practices
Ensure compliance with regulatory requirements and organizational security policies
Qualifications
Required Qualifications:
5+ years of professional software engineering experience with a focus on infrastructure and security systems
3+ years of hands-on experience with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or equivalent)
Strong expertise in Public Key Infrastructure (PKI), certificate management, and X.509 standards
Proficiency in cryptographic concepts, encryption protocols, and secure key management practices
Experience with Hardware Security Modules (HSMs) and cryptographic hardware integration
Solid programming skills in languages such as Go, Python, Java, or C++
Deep understanding of identity and access management (IAM) principles and practices
Experience with infrastructure-as-code tools and automation frameworks
Strong analytical and problem-solving skills with meticulous attention to detail
Excellent communication skills and ability to work effectively across technical and non-technical teams
Preferred Qualifications:
Experience with cloud-native security architectures and containerized environments
Familiarity with security compliance frameworks (FIPS 140-2, SOC 2, ISO 27001)
Knowledge of certificate transparency and OCSP (Online Certificate Status Protocol)
Experience with security incident response and forensics
Contributions to open-source security projects or communities
Experience with CI/CD pipeline security and secrets scanning tools
Understanding of zero-trust security models and their implementation
Additional Information
Why you'll love Mirantis
Build the observability foundation for the AI cloud era, working directly with leading GPU cloud operators, NeoClouds, sovereign clouds, and AI-first enterprises
Collaborate with a world-class, distributed team committed to openness and technical excellence
Shape the product narrative and influence go-to-market success
#remote
We are a Leader for Container Management in G2 (#2 after AWS)!
About Mirantis
Mirantis is a software company that provides cloud computing services and solutions. The company was founded in 2011 and is headquartered in Sunnyvale, California. Mirantis offers a range of cloud computing services, including OpenStack, Kubernetes, and Docker. The company's solutions are used by a variety of industries, including telecommunications, finance, and healthcare. Mirantis has over 1,000 employees and offices in the United States, Russia, Ukraine, and the United Kingdom.
