Values

The ad says“Infrastructure as Code: Terraform, Helm; GitOps (ArgoCD) a plus”
The ad says“Hands-on experience building security-focused systems — Privileged Access Management, Identity Governance, Authentication, Secrets Management, or adjacent domains”
The ad says“Cloud platform proficiency on AWS or Azure; multi-cloud experience is a plus”
The ad says“Cloud platform proficiency on AWS or Azure; multi-cloud experience is a plus”
The ad says“Go strongly preferred as the platform’s primary language; deep proficiency in at least one systems/services language (Go, Rust, C++, Java, or similar) is required”
The ad says“CI/CD pipeline design and ownership — GitLab, GitHub Actions, Jenkins, CloudBees, or equivalent”
The ad says“Active, deliberate use of AI coding tools (Claude Code, Cursor, Copilot, or comparable) as part of your daily workflow — beyond autocomplete”
The ad says“CI/CD pipeline design and ownership — GitLab, GitHub Actions, Jenkins, CloudBees, or equivalent”
The ad says“Active, deliberate use of AI coding tools (Claude Code, Cursor, Copilot, or comparable) as part of your daily workflow — beyond autocomplete”
The ad says“Working knowledge of modern cryptography in practice: TLS/mTLS, KMS-backed key hierarchies, envelope encryption, HSM/key vault integration”
The ad says“Active, deliberate use of AI coding tools (Claude Code, Cursor, Copilot, or comparable) as part of your daily workflow — beyond autocomplete”
The ad says“Solid hands-on Kubernetes experience — EKS or equivalent, Helm, manifests, operators, day-2 operations. Not “I used kubectl apply once.””
The ad says“Working knowledge of modern cryptography in practice: TLS/mTLS, KMS-backed key hierarchies, envelope encryption, HSM/key vault integration”
The ad says“CI/CD pipeline design and ownership — GitLab, GitHub Actions, Jenkins, CloudBees, or equivalent”
The ad says“CI/CD pipeline design and ownership — GitLab, GitHub Actions, Jenkins, CloudBees, or equivalent”
The ad says“Infrastructure as Code: Terraform, Helm; GitOps (ArgoCD) a plus”
The ad says“Microservices and API design: REST, gRPC/Protobuf, and the trade-offs between them”
The ad says“Solid hands-on Kubernetes experience — EKS or equivalent, Helm, manifests, operators, day-2 operations. Not “I used kubectl apply once.””
The ad says“Working knowledge of modern cryptography in practice: TLS/mTLS, KMS-backed key hierarchies, envelope encryption, HSM/key vault integration”
The ad says“Hands-on experience building security-focused systems — Privileged Access Management, Identity Governance, Authentication, Secrets Management, or adjacent domains”
The ad says“Go strongly preferred as the platform’s primary language; deep proficiency in at least one systems/services language (Go, Rust, C++, Java, or similar) is required”
The ad says“CI/CD pipeline design and ownership — GitLab, GitHub Actions, Jenkins, CloudBees, or equivalent”
The ad says“Working knowledge of modern cryptography in practice: TLS/mTLS, KMS-backed key hierarchies, envelope encryption, HSM/key vault integration”
The ad says“Solid hands-on Kubernetes experience — EKS or equivalent, Helm, manifests, operators, day-2 operations. Not “I used kubectl apply once.””
The ad says“Observability: OpenTelemetry, structured logging, metrics, tracing”
The ad says“Solid hands-on Kubernetes experience — EKS or equivalent, Helm, manifests, operators, day-2 operations. Not “I used kubectl apply once.””
The ad says“Demonstrated experience mentoring engineers and leading technical initiatives across distributed teams”
The ad says“Observability: OpenTelemetry, structured logging, metrics, tracing”
The ad says“Observability: OpenTelemetry, structured logging, metrics, tracing”
The ad says“Solid hands-on Kubernetes experience — EKS or equivalent, Helm, manifests, operators, day-2 operations. Not “I used kubectl apply once.””
The ad says“Relational database design at scale — PostgreSQL preferred; schema-per-tenant or comparable isolation patterns a plus”
The ad says“Hands-on experience building security-focused systems — Privileged Access Management, Identity Governance, Authentication, Secrets Management, or adjacent domains”
The ad says“Frontend literacy in TypeScript/React is a plus”
The ad says“Microservices and API design: REST, gRPC/Protobuf, and the trade-offs between them”
The ad says“Go strongly preferred as the platform’s primary language; deep proficiency in at least one systems/services language (Go, Rust, C++, Java, or similar) is required”
The ad says“Hands-on experience building security-focused systems — Privileged Access Management, Identity Governance, Authentication, Secrets Management, or adjacent domains”
The ad says“Workflow orchestration experience (Temporal or similar) is a plus”
The ad says“Working knowledge of modern cryptography in practice: TLS/mTLS, KMS-backed key hierarchies, envelope encryption, HSM/key vault integration”
The ad says“Observability: OpenTelemetry, structured logging, metrics, tracing”
The ad says“Frontend literacy in TypeScript/React is a plus”

This role is on the PAM Platform team, building the next generation of PAM infrastructure that runs across multi-tenant SaaS, customer-managed deployments, and federal GovCloud environments. We are a distributed, AI-first R&D organization, and we are actively rolling out an AI-Driven Development Lifecycle (AiDLC) as our SDLC of record
Drive technical strategy and architecture across PAM platform components, including federal-compliant deployment topologies
Partner with Product and Engineering Management on requirements analysis, roadmap planning, and technical decision-making
Lead end-to-end design and delivery of new services from greenfield through production hardening
Operate within and help shape our AiDLC workflow: living specs, AI-generated implementations, property-based and integration testing as blocking gates, and audit-tracked human approvals
Author and maintain the engineering contracts (CLAUDE.md, prompt libraries, agent skills, code standards) that govern how AI-driven development happens on the platform
Conduct deep code reviews on critical and security-sensitive changes — including AI-generated code
Mentor senior, staff, and associate principal engineers; raise the technical bar across the team
Debug, optimize, and refactor existing services as we evolve toward multi-tenant, multi-cloud, federal-
Ready
Serve as a technical expert for internal teams and, when needed, customer-facing escalations

Benefits

Competitive Pay: Money isn’t everything, but it sure helps. Base pay + bonuses = a rewarding experience.
Great Benefits: Medical, dental, vision, & retirement programs. We’ve got you covered from head to toe.
Flexible Time Off: Our holidays and flexible vacation policies ensure your next vacation is never out of reach.
Employee Recognition: Your hard work never goes unnoticed. We celebrate and recognize when our people go above and beyond.

Preferred experience

CI/CD pipeline design and ownership — GitLab, GitHub Actions, Jenkins, CloudBees, or equivalent
Hands-on experience building security-focused systems — Privileged Access Management, Identity Governance, Authentication, Secrets Management, or adjacent domains
Bachelor’s or Master’s degree in Computer Science, a related technical discipline, or equivalent professional experience
Cloud platform proficiency on AWS or Azure; multi-cloud experience is a plus
Strong written and verbal communication — you can write a clear design doc, a clear PR description, and a clear engineering contract for an AI agent
Comfortable operating in a globally distributed organization (US + India)
Demonstrated initiative and ability to prioritize independently in a fast-moving environment
Observability: OpenTelemetry, structured logging, metrics, tracing
Working knowledge of modern cryptography in practice: TLS/mTLS, KMS-backed key hierarchies, envelope encryption, HSM/key vault integration
Solid hands-on Kubernetes experience — EKS or equivalent, Helm, manifests, operators, day-2 operations. Not “I used kubectl apply once.”
Demonstrated experience mentoring engineers and leading technical initiatives across distributed teams
Excellent facilitation and consensus-building skills across engineering, product, and security stakeholders
1+ year of software engineering experience as a Principal Software Engineer with a SaaS company
Microservices and API design: REST, gRPC/Protobuf, and the trade-offs between them
Experience with event-driven architectures (message buses, async workflows) — you know when to reach for them and when not to
Qualifications
Required knowledge of FedRAMP, FIPS 140-3, and GovCloud (AWS GovCloud or Azure Government) — what they constrain, why, and how to design within them
Polyglot capability — you can read, reason about, and contribute across multiple languages, and you can defend language-choice decisions on technical merit
Frontend literacy in TypeScript/React is a plus
Strong testing discipline: unit, integration, end-to-end, and property-based testing
Infrastructure as Code: Terraform, Helm; GitOps (ArgoCD) a plus
Go strongly preferred as the platform’s primary language; deep proficiency in at least one systems/services language (Go, Rust, C++, Java, or similar) is required
Comfort working in a spec-driven, agent-assisted development model with mandatory verification gates; AiDLC will be our SDLC, and we expect candidates to embrace and help refine it
Containerization: Docker multi-stage builds, distroless/minimal runtimes
Active, deliberate use of AI coding tools (Claude Code, Cursor, Copilot, or comparable) as part of your daily workflow — beyond autocomplete
Critical-review instincts: you don’t ship AI-generated code without reading it, testing it, and understanding it
Workflow orchestration experience (Temporal or similar) is a plus
Track record of taking systems from design through production at scale, including multi-tenant SaaS
Relational database design at scale — PostgreSQL preferred; schema-per-tenant or comparable isolation patterns a plus

Asks for

Values

Benefits

Preferred experience