Software Engineer, Secrets Infrastructure
Builds and maintains TLS identity and secrets infrastructure critical to all Stripe services, using primarily Go. Designs integrations for Kubernetes/EC2, ensures high availability, and guides teams on security architecture. Requires 5+ years software experience, strong Go skills, and security/infra background.
About the job
Responsibilities
- Design and implement significant features in our certificate authority and secrets management systems
- Work across Go, Java, Ruby, and Python to implement authentication and secrets infrastructure used by every service at Stripe
- Work with other engineering teams to understand their needs and design secrets and identity integrations
- Develop certificate provisioning and secret management integrations for various compute platforms (Kubernetes, EC2, developer workstations)
- Work on reliability improvements to maintain 99.99%+ availability for critical infrastructure
- Participate in on-call rotation for critical infrastructure, working alongside senior engineers to debug and resolve production issues
Minimum Requirements
- 5+ years of professional software development experience. Strong programming skills in Go, with significant experience in other similar system programming languages (C++, Rust, C#, etc) as a potential alternative.
- 3+ years of infrastructure and security experience (can overlap with other experience)
- Experience in cryptography, PKI, secret management, or other security topics
- Familiarity with infrastructure tools like Kubernetes, Terraform, and cloud platforms
- Interest in security, infrastructure, and software development
- Enthusiasm for learning new technologies and working across multiple programming languages
- Strong debugging and problem-solving skills
- Clear verbal and written communication skills and ability to collaborate effectively with other engineers
- Experience leading cross-team projects and building alignment on multi-team technical direction
- Strong technical writing skills to write design documents
- On-call experience
Preferred Qualifications
- Prior experience building PKI or secret management infrastructure (as an SWE - not just provisioning a 3rd party tool or service)
- Experience in Java, Ruby, or Python
- Experience building developer tools, libraries, or platform services
- Experience with Kubernetes internals (how the platform works, not just as a user)
- Experience operating complex services on AWS
- Experience in fully remote work environments
Skills
Go, Kubernetes, Terraform, Pki, Cryptography, Secret Management, Java, Ruby, Python, AWS, EC2
Similar jobs
Backend Engineering jobs
PrizePicks
United States
Build and scale Ruby on Rails backend services for rewards, incentives, and loyalty features in a high-throughput platform. The role owns complex feature delivery, contributes to architecture, mentors junior engineers, and requires 3+ years of professional software engineering experience.
Twilio
United States
Build and operate backend capabilities for a cloud identity platform, including authentication flows, APIs, and developer experiences. The role requires 3+ years of experience with high-scale production systems and RESTful API development, with Go, TypeScript, and DynamoDB as preferred skills.
Anthropic
San Francisco, CABuild and scale reliable research infrastructure and distributed systems for evolving AI research workflows. The role independently leads complex technical projects, makes foundational architectural decisions, and partners with researchers and engineering teams.
Cloudflare
Austin, TXBuild and operate Internet-scale HTTP and TLS infrastructure, migrate services to a Rust-based proxy, and improve protocol performance. The role requires systems programming experience, strong reliability and security practices, and interest in open-source standards.
Writer
San Francisco, CABuild secure, scalable backend platforms and AI integrations connecting enterprise systems, tools, and data sources. The role requires 5+ years of backend engineering experience, distributed-systems expertise, cloud-native operations, authentication security, and technical leadership.