Senior Software Engineer (Secrets Mgmt + PKI)

EngRadar; Campbell (CA); Remote; USD 140,000 - 170,000; Full time

Job summary

EngRadar / Mirantis is seeking a Senior Software Engineer focusing on Secrets Management and PKI to design, implement, and secure credential systems in Campbell, CA, with remote options. You will build enterprise-grade solutions using Vault, AWS Secrets Manager, and Azure Key Vault, and manage PKI lifecycles.

You will collaborate across security, infrastructure, and applications, mentor junior engineers, and ensure compliance with regulatory standards.

Qualifications

• 5+ years of professional software engineering experience with a focus on infrastructure and security systems.
• 3+ years of hands-on experience with secrets management platforms (Vault, AWS Secrets Manager, Azure Key Vault, or equivalent).
• Strong expertise in PKI, certificate management, and X.509 standards.
• Proficiency in cryptographic concepts, encryption protocols, and secure key management practices.
• Experience with Hardware Security Modules (HSMs) and cryptographic hardware integration.
• Solid programming skills in Go, Python, Java, or C++.
• Deep understanding of IAM principles and practices.
• Experience with infrastructure-as-code tools and automation frameworks.

Responsibilities

• Design and implement enterprise-grade secrets management solutions.
• Develop and maintain PKI systems, including certificate lifecycle management.
• Architect credential rotation mechanisms and automated provisioning workflows.
• Collaborate with security, infrastructure, and application teams to integrate solutions.
• Conduct security audits and vulnerability assessments of implementations.
• Develop runbooks and best practice guides for operations.
• Troubleshoot certificate management, key storage, and access issues.
• Mentor junior engineers and promote security-focused practices.

Skills

Secrets management

PKI

Go

Python

Java

C++

IAM

Infrastructure as code

Tools

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

HSMs

Job description

EngRadar / Mirantis

Senior Software Engineer (Secrets Mgmt + PKI)

Mirantis is the employer — EngRadar is a job radar, not a recruiter. We track this posting from their own careers page and send you straight there; we never handle applications or CVs.

Remote Campbell, CA, United States Full-time Posted today

We're looking for a Senior Software Engineer specializing in Secrets Management and Public Key Infrastructure (PKI) to join our team in Campbell, United States. In this role, you will design, develop, and maintain secure systems that protect sensitive credentials and cryptographic assets across our organization. You'll work on complex infrastructure challenges, ensuring that secrets management and PKI solutions are robust, scalable, and compliant with industry security standards. This is an excellent opportunity for a detail-oriented engineer who is passionate about security and infrastructure excellence.

• Design and implement enterprise-grade secrets management solutions using industry-leading platforms such as HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault
• Develop and maintain Public Key Infrastructure (PKI) systems, including certificate lifecycle management, certificate authority operations, and cryptographic key management
• Architect secure credential rotation mechanisms and automated provisioning workflows to minimize security risks
• Collaborate with security, infrastructure, and application teams to integrate secrets management and PKI solutions across the organization
• Conduct security audits and vulnerability assessments of existing secrets management and PKI implementations
• Develop comprehensive documentation, runbooks, and best practice guides for secrets management and PKI operations
• Troubleshoot and resolve complex issues related to certificate management, key storage, and credential access
• Stay current with emerging security threats, cryptographic standards, and industry best practices in secrets management and PKI
• Mentor junior engineers and contribute to the development of security-focused engineering practices
• Ensure compliance with regulatory requirements and organizational security policies

Required Qualifications

• 5+ years of professional software engineering experience with a focus on infrastructure and security systems
• 3+ years of hands‑on experience with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or equivalent)
• Strong expertise in Public Key Infrastructure (PKI), certificate management, and X.509 standards
• Proficiency in cryptographic concepts, encryption protocols, and secure key management practices
• Experience with Hardware Security Modules (HSMs) and cryptographic hardware integration
• Solid programming skills in languages such as Go, Python, Java, or C++
• Deep understanding of identity and access management (IAM) principles and practices
• Experience with infrastructure‑as‑code tools and automation frameworks
• Strong analytical and problem‑solving skills with meticulous attention to detail
• Excellent communication skills and ability to work effectively across technical and non‑technical teams

Preferred Qualifications

• Experience with cloud-native security architectures and containerized environments
• Familiarity with security compliance frameworks (FIPS 140-2, SOC 2, ISO 27001)
• Knowledge of certificate transparency and OCSP (Online Certificate Status Protocol)
• Experience with security incident response and forensics
• Contributions to open-source security projects or communities
• Experience with CI/CD pipeline security and secrets scanning tools
• Understanding of zero‑trust security models and their implementation

Why you’ll love Mirantis

• Build the observability foundation for the AI cloud era, working directly with leading GPU cloud operators, NeoClouds, sovereign clouds, and AI‑first enterprises
• Collaborate with a world‑class, distributed team committed to openness and technical excellence
• Shape the product narrative and influence go‑to‑market success

It is understood that Mirantis, Inc. may use automated decision‑making technology (ADMT) for specific employment‑related decisions. Opting out of ADMT use is requested for decisions about evaluation and review connected with the specific employment decision for the position applied for. You also have the right to appeal any decisions made by ADMT by sending your request to [e-mail]

By submitting your resume, you consent to the processing and storage of your personal data in accordance with applicable data protection laws, for the purposes of considering your application for current and future job opportunities.

#remote

We are a Leader for Container Management in G2 (#2 after AWS)!