Remote Senior Proactive Security Platform Engineer

Doordashusa; United States; Remote; USD 180,000 - 250,000; Full time

Benefits offered by this job

Equity grants

401(k) matching

Parity with parental leave

Wellness benefits

Commuter benefits

Job summary

DoorDash is seeking a Senior Software Engineer, Proactive Security - Platform to build the paved paths that engineers use to access infrastructure, manage secrets and authenticate services. You will join a global Security Engineering Platform team responsible for tier-0 security services and self-service tooling that integrates with Kubernetes, CI/CD, AWS and GCP across DoorDash, Wolt and Deliveroo.

This US remote role reports to the Manager of Proactive Security Engineering Platform.

Qualifications

• 6+ years of experience as a Software, Infrastructure or Security Platform Engineer at an internet scale organization.
• Bachelor's degree in Computer Science, Security Engineering, a related field or equivalent work experience.
• Strong software engineering skills in Go (or Kotlin, Java, Python), building production services and developer tooling.
• Hands-on experience building or operating access management and secret storage systems, such as PAM, secrets management or key management platforms.
• Solid understanding of distributed systems, including replication and distributed consensus (e.g. Raft, Paxos).
• Working knowledge of identity and authentication standards such as OIDC, SAML, mTLS and workload identity (e.g. SPIFFE, AWS IAM Roles, GCP Workload Identity).
• Experience with Kubernetes, Terraform or other infrastructure as code, and AWS and/or GCP IAM.
• Track record of building internal platforms or paved paths that other engineers adopted, with a focus on developer experience.
• Experience running highly available, no-downtime services with mature on‑call practices.
• Clear verbal and written communication skills, and the ability to drive adoption across engineering teams.

Responsibilities

• Design, build and operate paved paths for privileged access, secrets management and identity on top of our access management and secret storage platforms.
• Build self-service tooling, SDKs, Terraform modules and integrations that let engineering teams adopt just-in-time access, short-lived credentials and dynamic secrets without filing a ticket.
• Design and operate highly available distributed systems, including replication, consistency and consensus, that underpin tier-0 services.
• Drive migrations off long-lived credentials and standing access. Success is measured in classes of exposure eliminated at the platform layer, not in shipping code for its own sake.
• Partner with Core Infrastructure, Compute, Data and product engineering teams to integrate paved paths into Kubernetes, CI/CD, and AWS and GCP environments across DoorDash, Wolt and Deliveroo.
• Participate in a follow-the-sun on-call rotation for tier-0 security services and raise the bar on Operational Excellence through monitoring, runbooks, incident response and root cause analysis.
• Help enable the secure adoption of AI tooling and agentic workflows through access control and secrets brokering for agents.

Skills

Go

Kubernetes

Terraform

IAM

Secrets management

On-call

Distributed systems

Education

Bachelor's degree

Tools

Teleport

HashiCorp Vault

Job description

DoorDash is seeking a Senior Software Engineer, Proactive Security - Platform to build the paved paths that engineers use to access infrastructure, manage secrets and authenticate services. You will join a global Security Engineering Platform team responsible for tier-0 security services and self-service tooling that integrates with Kubernetes, CI/CD, AWS and GCP across DoorDash, Wolt and Deliveroo.

This US remote role reports to the Manager of Proactive Security Engineering Platform.