Senior Software Engineer (Security) - Secrets Management & PKI

About the role

Mirantis, a Kubernetes-native AI infrastructure company, is looking for a Senior Software Engineer specializing in Secrets Management and Public Key Infrastructure (PKI) to join its team in Campbell, United States. The engineer designs, develops and maintains secure systems that protect sensitive credentials and cryptographic assets, building robust, scalable and compliant solutions.

Key responsibilities

• Design and implement enterprise-grade secrets management solutions using platforms such as HashiCorp Vault, AWS Secrets Manager or Azure Key Vault
• Develop and maintain PKI systems, including certificate lifecycle management, certificate authority operations and cryptographic key management
• Architect secure credential rotation mechanisms and automated provisioning workflows
• Integrate secrets management and PKI solutions with security, infrastructure and application teams
• Conduct security audits and vulnerability assessments of existing implementations
• Write documentation, runbooks and best practice guides, and mentor junior engineers
• Ensure compliance with regulatory requirements and organizational security policies

Required profile

• 5+ years of professional software engineering experience focused on infrastructure and security systems
• 3+ years of hands-on experience with secrets management platforms
• Strong PKI expertise, including X.509 standards, and solid knowledge of IAM principles
• Experience with HSMs and cryptographic hardware integration
• Preferred: cloud-native security, security compliance frameworks (FIPS 140-2, SOC 2, ISO 27001), certificate transparency and OCSP, incident response, open-source contributions, CI/CD pipeline security and zero-trust models

Required skills

• HashiCorp Vault, AWS Secrets Manager, Azure Key Vault
• Go, Python, Java or C++
• Infrastructure-as-code tools and automation frameworks