Skip to content
StripeStripeUnited States

Software Engineer, Secrets Infrastructure

Builds and maintains TLS identity and secrets infrastructure critical to all Stripe services, using primarily Go. Designs integrations for Kubernetes/EC2, ensures high availability, and guides teams on security architecture. Requires 5+ years software experience, strong Go skills, and security/infra background.

Salary not listed
Remote5+ YOEBackend Engineering

About the role

Responsibilities

  • Design and implement significant features in our certificate authority and secrets management systems
  • Work across Go, Java, Ruby, and Python to implement authentication and secrets infrastructure used by every service at Stripe
  • Work with other engineering teams to understand their needs and design secrets and identity integrations
  • Develop certificate provisioning and secret management integrations for various compute platforms (Kubernetes, EC2, developer workstations)
  • Work on reliability improvements to maintain 99.99%+ availability for critical infrastructure
  • Participate in on-call rotation for critical infrastructure, working alongside senior engineers to debug and resolve production issues

Minimum Requirements

  • 5+ years of professional software development experience. Strong programming skills in Go, with significant experience in other similar system programming languages (C++, Rust, C#, etc) as a potential alternative.
  • 3+ years of infrastructure and security experience (can overlap with other experience)
  • Experience in cryptography, PKI, secret management, or other security topics
  • Familiarity with infrastructure tools like Kubernetes, Terraform, and cloud platforms
  • Interest in security, infrastructure, and software development
  • Enthusiasm for learning new technologies and working across multiple programming languages
  • Strong debugging and problem-solving skills
  • Clear verbal and written communication skills and ability to collaborate effectively with other engineers
  • Experience leading cross-team projects and building alignment on multi-team technical direction
  • Strong technical writing skills to write design documents
  • On-call experience

Preferred Qualifications

  • Prior experience building PKI or secret management infrastructure (as an SWE - not just provisioning a 3rd party tool or service)
  • Experience in Java, Ruby, or Python
  • Experience building developer tools, libraries, or platform services
  • Experience with Kubernetes internals (how the platform works, not just as a user)
  • Experience operating complex services on AWS
  • Experience in fully remote work environments

Skills

GoKubernetesTerraformPkiCryptographySecret ManagementJavaRubyPythonAWSEC2

Similar roles

Backend Engineering jobs
Scribe

Backend Engineer

ScribeSan Francisco, CA

Backend Engineer building and optimizing core document workflows (viewing, editing, embeds, exports) and greenfield projects in a Django monolith. Requires 3+ years backend experience, strong Python skills, performance optimization, and automated testing.

140k – 185k/yr
Hybrid3+ YOEBackend Engineering
OpenAI

Software Engineer, Codex -Enterprise Controls

OpenAISan Francisco, CA

Build and operate the enterprise control plane for OpenAI's Codex AI software engineer, focusing on security, governance, identity, access controls, encryption, and policy enforcement systems for large organizations.

230k – 385k/yr
Hybrid5+ YOEBackend Engineering
ZoomInfo

Software Engineer III

ZoomInfoBethesda, MD +1

Software Engineer III designing, building, and maintaining scalable backend systems with Java, Node.js/NestJS, Kafka, and cloud technologies (AWS/GCP). Requires Master's in CS + 2 years (or Bachelor's + 4 years) backend experience, microservices, databases, and REST APIs.

112k – 176k/yr
Hybrid4+ YOEBackend Engineering
Upstart

Software Engineer, Upstart Bank

UpstartUnited States

Software Engineer building scalable backend systems, services, and APIs for Upstart Bank, a modern AI-enabled national bank. Translate regulatory and business requirements into reliable software in a fintech environment; 4+ years backend/full-stack experience required.

14k – 187k/yr
Remote4+ YOEBackend Engineering
Cloudflare

Software Engineer, Workers Deploy & Config

CloudflareNew York, NY +4

Build and scale the control plane for Cloudflare Workers, the serverless edge platform. Design distributed systems, high-traffic APIs, storage schemas, and own production reliability for services powering Pages and R2. Requires strong Go experience plus knowledge of observability, databases, and Kubernetes.

150k – 206k/yr
On-site5+ YOEBackend Engineering