Software Engineer, Security

Requirements

• Solid backend software engineering experience with strong computer science fundamentals: networking, distributed systems, and security concepts.
• Good understanding of authentication and authorization: familiarity with protocols such as SigV4, OAuth2, mTLS, or IAM-style policy systems.
• Understanding of cryptographic fundamentals: symmetric encryption, key hierarchies, certificate management, or secret management systems.
• Experience driving complex projects end-to-end and collaborating across teams.

Nice to Haves

• Experience with IAM systems, STS/short-lived credentials, or policy-based access control.
• Hands-on experience with encryption infrastructure: key rotation, envelope encryption, or integrating with secret managers (e.g., HashiCorp Vault, AWS KMS, or equivalent).
• Familiarity with compliance frameworks such as PCI-DSS or SOX in a cloud infrastructure context.
• Experience with threat modeling methodologies or conducting security design reviews.

What You'll Be Doing

• Working on designing and evolving authentication systems to meet modern security standards.
• Implementing and improving encryption-at-rest schemes with robust key lifecycle management at scale.
• Building IAM policy enforcement at high throughput.
• Driving compliance for a multi-region storage platform.
• Conducting threat modeling for a system handling hundreds of thousands of requests per second.
• Contributing to broader storage engineering work including durability, availability, multi-tenancy, and performance.

Perks and Benefits

• Not specified in the provided job description.