Staff IAM & KMS Platform Architect

DigitalOcean; Seattle (WA); Hybrid; USD 235,000 - 294,000; Full time

Benefits offered by this job

Hybrid role

Equity compensation

Employee Stock Purchase Program

Career development resources (LinkedIn

Learning access

Job summary

DigitalOcean is seeking a Staff Software Engineer to own IAM and KMS platforms, defining the multi-year roadmap and leading engineers across teams. You will design hyperscale identity services, enabling secure token exchange and policy-driven access for AI workflows on a global cloud.

You will drive architectural strategy, establish security standards, and mentor engineers while collaborating with cross-team partners to remove platform gaps and accelerate developer velocity.

Qualifications

• Requires 10+ years of software engineering experience with at least 4+ years in Identity, Key Management, or high-scale distributed systems.
• Expert-level Go and deep experience with a gRPC microservices architecture.
• Deep knowledge of identity protocols (OIDC, OAuth2, SAML, SCIM) and access control models.
• Hands-on experience with envelope encryption, HSM integration, and BYOK/CMEK patterns.

Responsibilities

• Define and drive the multi-year technical roadmap for IAM and KMS.
• Design high-availability, low-latency identity and key management services across global regions.
• Architect secure token exchange patterns for AI workflows and IAM foundations.
• Deliver a robust multi-tenant KMS with envelope encryption and granular data security.
• Advance authorization with policy engine (Rego/OPA) for complex resource permissions.
• Collaborate with cross-team partners to close architectural gaps across platforms.
• Set cryptographic and identity engineering standards across the org.
• Mentor senior and mid-level engineers and promote secure-first engineering.

Skills

Go

gRPC

Identity protocols

RBAC/ABAC/PBAC

Kubernetes

Terraform

Cryptography

Security architecture

Tools

Kubernetes

MySQL

Terraform

HashiCorp Vault

Job description

DigitalOcean is seeking a Staff Software Engineer to own IAM and KMS platforms, defining the multi-year roadmap and leading engineers across teams. You will design hyperscale identity services, enabling secure token exchange and policy-driven access for AI workflows on a global cloud.

You will drive architectural strategy, establish security standards, and mentor engineers while collaborating with cross-team partners to remove platform gaps and accelerate developer velocity.