Principal Software Engineer

Responsibilities

• Define and drive the multi-year technical roadmap for IAM and KMS
• Architect high-availability, low-latency identity and key management services in Go
• Design secure token exchange patterns and identity context injection for agentic AI workflows
• Deliver a robust, multi-tenant KMS including envelope encryption and HSM-backed key material
• Drive the evolution of the Policy Engine (Rego/OPA) for advanced resource-level permissions
• Partner with cross-functional teams like Inference, Billing, and Platform Security
• Establish cryptographic and identity engineering standards and author RFCs
• Mentor and develop senior and mid-level engineers

Requirements

• 10+ years of software engineering experience
• 4+ years focused on Identity (AuthN/AuthZ), Key Management, or high-scale distributed systems
• Expert-level proficiency in Go and gRPC microservices architecture
• Deep knowledge of identity protocols (OIDC, OAuth2, SAML, SCIM) and access control models (RBAC, ABAC, PBAC)
• Hands-on experience with key management infrastructure, envelope encryption, and HSM integration
• Proven ability to build distributed systems handling consensus, replication, and partitioning
• Experience with Kubernetes, SQL (MySQL), and Terraform
• Strong technical leadership and ability to drive multi-team platform initiatives
• Excellent communication skills for writing RFCs and presenting to leadership

Preferred Qualifications

• Experience with SPIFFE/SPIRE or workload identity federation
• Familiarity with secrets management platforms like HashiCorp Vault
• Contributions to open-source identity or cryptography projects

About the Company

DigitalOcean is a cloud provider focused on simplifying cloud and AI for builders, providing scalable infrastructure for developers worldwide.