Principal Software Engineer - Secrets

Pulumi Corporation; United States; Remote; USD 180,000 - 228,000; Full time

Job summary

Pulumi Corporation is seeking a Principal Software Engineer specializing in Security and Secrets Management. This remote role involves leading the development of innovative solutions for managing sensitive data and collaborating across teams to enhance security practices. The ideal candidate will have extensive experience in security-focused software engineering and a passion for cloud-native technologies.

Benefits

Unlimited PTO policy

401(k) plan with employer match

Comprehensive health insurance

20 weeks of paid parental leave

Annual learning and development budget

Qualifications

• 8+ years of professional software engineering experience in security or distributed systems.
• Proven experience in secrets management and cryptography.
• Expertise in programming languages such as Go, Python, or Rust.

Responsibilities

• Lead the development of innovative secrets management solutions.
• Develop secure, high-performance services across multi-cloud environments.
• Conduct security assessments and provide technical leadership.

Skills

Security-focused software solutions

Leadership

Collaboration

Mentoring

Cloud-native environments

Zero-trust architectures

Tools

Kubernetes

Docker

Job description

At Pulumi, you will be challenged, learn, teach, and collaborate with an elite team of great people.

In order to succeed at Pulumi, you will need to resonate with the following values:

• We succeed and failas a team
• Aninclusive environmentbubbles the best ideas to the top
• Our customerssit at the center of every decision
• We achieve the best results throughopenness and honesty, even when uncomfortable
• Work smart, butbias for action and results
• Our natural curiosity for technology keeps usalways learning
• Think big, dream, and define the future of engineering in the cloud

While Pulumi is headquartered in Seattle, WA., we are dedicated to being a remote-first company. This role will be located remotely in the United States.

About the Role:

As a Principal Software Engineer specializing in Security and Secrets Management, you will lead the evolution of our Environments, Secrets, and Configuration (ESC) platform, building the next generation of secrets management and orchestration. Your work will be at the forefront of designing scalable, secure, and user-friendly solutions that enable developers to manage sensitive data, credentials, and configurations across diverse environments.

Your work will directly impact how organizations securely manage sensitive data, access credentials, and cryptographic keys at scale, safeguarding our users and partners. This is a hands-on technical leadership role where you will collaborate across engineering, product, and security teams to build cutting-edge solutions in cloud-native environments.

Key Responsibilities:

• Architect and lead the development of innovative secrets management solutions within the Pulumi ESC platform, enabling seamless and secure handling of sensitive data.
• Develop secure, high-performance services that provide configuration, encryption, and access control across multi-cloud and on-prem environments.
• Collaborate with engineering and security teams to enforce the highest standards of secure development practices throughout the software lifecycle.
• Lead design and implement fault-tolerant, scalable systems to manage secrets in highly distributed environments.
• Conduct security assessments and threat modeling, and provide technical leadership on projects to continuously enhance the platform’s security posture.
• Mentor engineering teams on best practices for secure code development and zero-trust architectures.
• Stay at the cutting edge of security and secrets management trends, pushing Pulumi to deliver innovative, reliable, and user-friendly solutions.
• Influence and drive cross-functional initiatives to shape the future of secrets orchestration and configuration management at Pulumi.

Qualifications:

• 8+ years of professional software engineering experience in security, infrastructure, or distributed systems.
• Proven experience building and maintaining security-focused software solutions, especially in secrets management, cryptography, or access control.
• Deep understanding of modern security architectures, zero-trust models, and distributed systems security.
• Expertise in programming languages such as Go, Python, or Rust.
• Experience with cloud-native environments, containers, and orchestration tools like Kubernetes and Docker.
• Strong understanding of multi-cloud architectures (AWS, GCP, Azure) and hybrid environments.
• Familiarity with compliance frameworks (SOC 2, HIPAA, PCI-DSS) and secure coding standards.
• Excellent leadership and collaboration skills, with a proven ability to mentor engineers and advocate for secure engineering principles.

Preferred Qualifications:

• Experience with large-scale distributed systems and multi-cloud infrastructure management.
• Hands-on experience with specific security technologies such as PKI, OIDC, OAuth, etc.
• Hands-on experience with configuration management tools and secure key handling in complex environments.
• Track record of contributing to or leading security initiatives in open-source projects.
• Familiarity with secrets management solutions in cloud-native environments.

Compensation:

• Base Salary Hiring Range: $180,500 - $227,850
• All full-time employee offers at Pulumi include base salary, bonus or variable, equity and benefits (details below).

Benefits & Perks at Pulumi:

Health & Wellness:
We offer comprehensive medical, dental, vision, and supplemental insurance at no cost to U.S. employees. Internationally, we comply with local healthcare requirements and provide regionally appropriate coverage.

Time Off:
Our unlimited PTO policy encourages balance and rest — and we require employees to take at least three weeks off annually, plus 13 U.S. holidays.

401(k):
U.S. employees are eligible for a 401(k) plan with an employer match to support long-term financial wellness.

Parental Leave:
We provide 20 weeks of paid leave for birthing parents or primary caregivers, and 16 weeks for non-birthing parents or secondary caregivers.

Remote-First Culture:
Pulumi has been fully remote since 2020, with teammates across 20+ U.S. states and 12+ countries. We support flexible work with asynchronous collaboration and an annual “work from anywhere” stipend.

Professional Development:
Every employee receives an annual learning and development budget to support growth, learning, and career goals.

Equity Ownership:
We believe in acting like owners. All employees receive equity and are empowered to think big, move fast, and build the future of cloud together.

Additional Support:
We offer a monthly wellness fund to support mental and physical well-being, and a quarterly happiness fund for team connection or personal use.

About Pulumi:

Pulumi is reimagining how teams build cloud software, enabling developers and infrastructure experts to work better together through a unique combination of programming languages, tools, and systems innovation.

Our flagship infrastructure as code technology is open source and our SaaS product, Pulumi Cloud, provides platform teams, secrets management, and cloud management capabilities, and more. We have pioneered leveraging AI across all of these areas with our LLM-powered Pulumi Copilot to push the boundaries of what's possible. At Pulumi, we dream big, in the pursuit of helping our customers out-innovate and win.

Founded in 2017 by industry veterans with over five decades of combined experience building developer platforms, Pulumi now has a global community of more than 350,000 members and serves over 3,250 customers. Despite our rapid growth, we're still only getting started, and are early in our mission to democratize the cloud. If you thrive in a fast-paced, high-performance, we want to work with you to accelerate Pulumi's impact.

At Pulumi, we don't just accept difference, we celebrate, support, and thrive on it for the benefit of our employees, our products, and our customers. Pulumi is proud to be an equal opportunity workplace and is committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. If you have a disability or special need that requires accommodation, please let us know.

Apply for this job

*

indicates a required field

First Name *

Last Name *

Email *

Phone *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile

Personal Website

For US Candidates: Do you now or will you in the future require visa sponsorship to work in the US? * Select...

At this time, we can only hire in locations where we have a legal entity or the ability to support employment, so this information helps us determine if we can move forward with your application. Please provide your current state (if in the U.S.) and/or country of residence. This information will only be used for application assessment and will remain confidential. *