SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mirantis is seeking a Senior Software Engineer specializing in Secrets Management and Public Key Infrastructure (PKI) to design, develop, and maintain secure systems protecting sensitive credentials and cryptographic assets. You will work on enterprise-grade infrastructure challenges, ensuring secrets management and PKI solutions are robust, scalable, and compliant with industry security standards.
Key responsibilities include:
- Design and implement enterprise-grade secrets management solutions using HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or equivalent platforms
- Develop and maintain PKI systems, including certificate lifecycle management, certificate authority operations, and cryptographic key management
- Architect secure credential rotation mechanisms and automated provisioning workflows to minimize security risks
- Collaborate with security, infrastructure, and application teams to integrate secrets management and PKI solutions across the organization
- Conduct security audits and vulnerability assessments of existing implementations
- Develop comprehensive documentation, runbooks, and best practice guides
- Troubleshoot and resolve complex issues related to certificate management, key storage, and credential access
- Stay current with emerging security threats, cryptographic standards, and industry best practices
- Mentor junior engineers and contribute to security-focused engineering practices
- Ensure compliance with regulatory requirements and organizational security policies
Mirantis is a Kubernetes-native AI infrastructure company enabling organizations to build and operate scalable, secure, and sovereign infrastructure for modern AI, machine learning, and data-intensive applications. The company combines open source innovation with deep expertise in Kubernetes orchestration, empowering platform engineering teams to deliver composable, production-ready developer platforms across any environment.
REQUIREMENTS:
- 5+ years of professional software engineering experience with focus on infrastructure and security systems
- 3+ years of hands-on experience with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or equivalent)
- Strong expertise in Public Key Infrastructure (PKI), certificate management, and X.509 standards
- Proficiency in cryptographic concepts, encryption protocols, and secure key management practices
- Experience with Hardware Security Modules (HSMs) and cryptographic hardware integration
- Solid programming skills in Go, Python, Java, or C++
- Deep understanding of identity and access management (IAM) principles and practices
- Experience with infrastructure-as-code tools and automation frameworks
- Strong analytical and problem-solving skills with meticulous attention to detail
- Excellent communication skills and ability to work effectively across technical and non-technical teams
PREFERRED QUALIFICATIONS:
- Experience with cloud-native security architectures and containerized environments
- Familiarity with security compliance frameworks (FIPS 140-2, SOC 2, ISO 27001)
- Knowledge of certificate transparency and OCSP (Online Certificate Status Protocol)
- Experience with security incident response and forensics
- Contributions to open-source security projects or communities
- Experience with CI/CD pipeline security and secrets scanning tools
- Understanding of zero-trust security models and their implementation
