STACKIT Platform Services - Secrets Manager & KMS - Software Engineer (m/f/d)

Schwarz Digits; Barcelona; Presencial; EUR 40.000 - 70.000; Jornada completa

Descripción de la vacante

Schwarz Digits in Barcelona is looking for a Software Engineer with a focus on Applied Cryptography and Cloud-Native Security. You'll design and develop a Key Management Service, manage secure key generation, and build robust REST APIs. Familiarity with Kubernetes and cryptographic algorithms is essential. The role emphasizes ownership of the entire software development lifecycle in a high-security environment. Join us to help shape the digital future in Europe.

Formación

• Deep enthusiasm for Software Engineering, Applied Cryptography, and Cloud-Native security.
• Familiar with cryptographic algorithms (AES-GCM, RSA-OAEP, ECDSA).
• Experience with Kubernetes operators for lifecycle management.

Responsabilidades

• Design and develop Key Management Service with secure key generation.
• Implement and optimize complex data flows for multi-layered security.
• Build and maintain robust REST APIs for key management.

Conocimientos

Software Engineering

Applied Cryptography

Cloud-Native Security

Kubernetes

REST API Development

Descripción del empleo

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace.

Your Tasks

• You design and develop our Key Management Service, focusing on secure key generation, lifecycle management (Key Rotation), and high-performance cryptographic operations.
• You implement and optimize complex data flows like Envelope Encryption, managing the relationship between Data Encryption Keys (DEKs) and Key Encryption Keys (KEKs) to provide multi-layered security.
• You develop Kubernetes operators to automate the entire lifecycle of the KMS and Secrets Manager, ensuring the service is self-healing, scalable, and easy to configure.
• You build and maintain robust REST APIs that allow customers to programmatically manage Key Rings, import external keys, and execute signing/verification workflows.
• You take ownership in an "You Build It - You Run It" environment, acting as the bridge between security engineering and SRE.
• You ensure that every cryptographic operation adheres to industry standards (AES, RSA, ECDSA, HMAC) and provides the necessary audit trails for sovereign cloud requirements.

Your Profile

• You have a deep enthusiasm for Software Engineering, Applied Cryptography, and Cloud‑Native security.
• You actively own the entire software development lifecycle; go and k8s are your bread and butter—K8s operators are preferably a core part of your engineering toolkit.
• You are familiar with—or eager to master—cryptographic algorithms (AES‑GCM, RSA‑OAEP, ECDSA) and understand the logic behind secure key wrapping and transport.
• You understand that "sovereign" means more than just a location; you understand the auditing and compliance needs of managing secrets in a high‑stakes cloud environment.
• You don't just look at code; you understand how data flows through a system, identifying potential bottlenecks in API body sizes or cryptographic overhead to ensure cost‑efficiency and performance.
• You enjoy discovering new security standards and are excited about sharing your knowledge with the team.

We look forward to receiving your application.