Software Engineer, Secrets Infrastructure
United StatesRemote5+ YOE
Summary
Builds and maintains TLS identity and secrets infrastructure critical to all Stripe services, using primarily Go. Designs integrations for Kubernetes/EC2, ensures high availability, and guides teams on security architecture. Requires 5+ years software experience, strong Go skills, and security/infra background.
About the role
Responsibilities
- Design and implement significant features in our certificate authority and secrets management systems
- Work across Go, Java, Ruby, and Python to implement authentication and secrets infrastructure used by every service at Stripe
- Work with other engineering teams to understand their needs and design secrets and identity integrations
- Develop certificate provisioning and secret management integrations for various compute platforms (Kubernetes, EC2, developer workstations)
- Work on reliability improvements to maintain 99.99%+ availability for critical infrastructure
- Participate in on-call rotation for critical infrastructure, working alongside senior engineers to debug and resolve production issues
Minimum Requirements
- 5+ years of professional software development experience. Strong programming skills in Go, with significant experience in other similar system programming languages (C++, Rust, C#, etc) as a potential alternative.
- 3+ years of infrastructure and security experience (can overlap with other experience)
- Experience in cryptography, PKI, secret management, or other security topics
- Familiarity with infrastructure tools like Kubernetes, Terraform, and cloud platforms
- Interest in security, infrastructure, and software development
- Enthusiasm for learning new technologies and working across multiple programming languages
- Strong debugging and problem-solving skills
- Clear verbal and written communication skills and ability to collaborate effectively with other engineers
- Experience leading cross-team projects and building alignment on multi-team technical direction
- Strong technical writing skills to write design documents
- On-call experience
Preferred Qualifications
- Prior experience building PKI or secret management infrastructure (as an SWE - not just provisioning a 3rd party tool or service)
- Experience in Java, Ruby, or Python
- Experience building developer tools, libraries, or platform services
- Experience with Kubernetes internals (how the platform works, not just as a user)
- Experience operating complex services on AWS
- Experience in fully remote work environments
Skills
GoKubernetesTerraformPKICryptographySecret ManagementJavaRubyPythonAWSEC2