Principal Software Engineer - Secrets

View full description

Requirements:

• 8+ years of professional software engineering experience in security, infrastructure, or distributed systems.
• Proven experience building and maintaining security-focused software solutions, especially in secrets management, cryptography, or access control.
• Deep understanding of modern security architectures, zero-trust models, and distributed systems security.
• Expertise in programming languages such as Go, Python, or Rust.
• Experience with cloud-native environments, containers, and orchestration tools like Kubernetes and Docker.
• Strong understanding of multi-cloud architectures (AWS, GCP, Azure) and hybrid environments.
• Familiarity with compliance frameworks (SOC 2, HIPAA, PCI-DSS) and secure coding standards.
• Excellent leadership and collaboration skills, with a proven ability to mentor engineers and advocate for secure engineering principles.

Responsibilities:

• Architect and lead the development of innovative secrets management solutions within the Pulumi ESC platform, enabling seamless and secure handling of sensitive data.
• Develop secure, high-performance services that provide configuration, encryption, and access control across multi-cloud and on-prem environments.
• Collaborate with engineering and security teams to enforce the highest standards of secure development practices throughout the software lifecycle.
• Lead design and implement fault-tolerant, scalable systems to manage secrets in highly distributed environments.
• Conduct security assessments and threat modeling, and provide technical leadership on projects to continuously enhance the platform’s security posture.
• Mentor engineering teams on best practices for secure code development and zero-trust architectures.
• Stay at the cutting edge of security and secrets management trends, pushing Pulumi to deliver innovative, reliable, and user-friendly solutions.
• Influence and drive cross-functional initiatives to shape the future of secrets orchestration and configuration management at Pulumi.