Principal Software Engineer
Core
Design and build highly available certificate lifecycle systems, resilient key and secrets management, and identity/authorization for multi-tenant Kubernetes and cloud-native infrastructure.
Role type
Principal Software Engineer (Security Architecture)
Builds
Foundational COSMIC security services, certificate lifecycle systems, key management, and identity systems
Domain
Cloud Security / PKI / Cryptography
Required skills
C, C++, C#, Java, JavaScript, Python, X.509, Certificate Authorities, TLS/mTLS, Cryptographic primitives, HSM, KMS, Kubernetes, Zero-trust architecture, Threat modeling, Policy-as-code
Preferred skills
SPIFFE/SPIRE, Secrets Store CSI Driver, Service mesh security, Supply-chain security, Cryptographic agility
Technologies
Kubernetes, KMS, HSM, SPIFFE, SPIRE, X.509, mTLS
Responsibilities
Design and build certificate lifecycle systems (enrollment, issuance, revocation, rotation); Build resilient key and secrets management capabilities; Advance identity and authorization for multi-tenant Kubernetes; Threat model complex distributed systems; Lead production readiness and operations; Drive end-to-end security features across control planes and resource provisioning; Lead cross-team architecture and execution; Mentor engineers in security practices
Seniority
Principal, strategy & mentorship
