SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mirantis is seeking a Senior Software Engineer specializing in Secrets Management and Public Key Infrastructure (PKI) to design, develop, and maintain secure systems protecting sensitive credentials and cryptographic assets. You will work on enterprise-grade infrastructure challenges, ensuring secrets management and PKI solutions are robust, scalable, and compliant with industry security standards.
Key responsibilities include:
- Design and implement enterprise-grade secrets management solutions using HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or equivalent platforms
- Develop and maintain PKI systems, including certificate lifecycle management, certificate authority operations, and cryptographic key management
- Architect secure credential rotation mechanisms and automated provisioning workflows to minimize security risks
- Collaborate with security, infrastructure, and application teams to integrate secrets management and PKI solutions across the organization
- Conduct security audits and vulnerability assessments of existing implementations
- Develop comprehensive documentation, runbooks, and best practice guides
- Troubleshoot and resolve complex issues related to certificate management, key storage, and credential access
- Stay current with emerging security threats, cryptographic standards, and industry best practices
- Mentor junior engineers and contribute to security-focused engineering practices
- Ensure compliance with regulatory requirements and organizational security policies
Mirantis is a Kubernetes-native AI infrastructure company enabling organizations to build and operate scalable, secure, and sovereign infrastructure for modern AI and machine learning applications. The company combines open source innovation with deep Kubernetes expertise, empowering platform engineering teams to deliver production-ready developer platforms across any environment.
REQUIREMENTS:
- 5+ years of professional software engineering experience with focus on infrastructure and security systems
- 3+ years of hands-on experience with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or equivalent)
- Strong expertise in Public Key Infrastructure (PKI), certificate management, and X.509 standards
- Proficiency in cryptographic concepts, encryption protocols, and secure key management practices
- Experience with Hardware Security Modules (HSMs) and cryptographic hardware integration
- Solid programming skills in Go, Python, Java, or C++
- Deep understanding of identity and access management (IAM) principles and practices
- Experience with infrastructure-as-code tools and automation frameworks
- Strong analytical and problem-solving skills with meticulous attention to detail
- Excellent communication skills and ability to work effectively across technical and non-technical teams
PREFERRED QUALIFICATIONS:
- Experience with cloud-native security architectures and containerized environments
- Familiarity with security compliance frameworks (FIPS 140-2, SOC 2, ISO 27001)
- Knowledge of certificate transparency and OCSP (Online Certificate Status Protocol)
- Experience with security incident response and forensics
- Contributions to open-source security projects or communities
- Experience with CI/CD pipeline security and secrets scanning tools
- Understanding of zero-trust security models and their implementation
