SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Delinea is a cloud-native identity security platform that secures human and machine identities through intelligent, centralized authorization. This role is on the StrongDM team (now part of Delinea), which builds the universal access management platform that secures and audits access to databases, servers, Kubernetes clusters, and web applications.
As a Staff Software Engineer, you will apply deep expertise across distributed systems, security, and cloud architecture to shape the technical direction of StrongDM's proxy and control-plane platform. You will own the platform's most complex and ambiguous engineering challenges, exercise independent judgment on architecture and design decisions spanning multiple teams, and serve as a recognized subject matter expert on secure, high-scale distributed systems written in Go.
Key responsibilities include:
- Design the architecture and technical direction of highly concurrent, distributed backend systems in Go, setting engineering standards across multiple teams.
- Drive design decisions for the proxy data plane (gateways and relays) and control-plane services, evaluating tradeoffs on complex technical problems.
- Partner with architects, product managers, and DevOps/SRE leadership to shape multi-quarter system roadmaps.
- Serve as a subject matter expert on secure network protocols and cryptographic systems (TLS/mTLS, credential brokering, key management).
- Lead code and design reviews across teams, maintaining high bars for performance, security, and maintainability; coach engineers independently.
- Investigate and resolve challenging technical issues in distributed, multi-cloud production environments.
- Author and maintain architectural and technical strategy documentation informing decisions beyond your immediate team.
- Mentor engineers across the team and may direct the work of others, building cross-team relationships that align engineering execution with company objectives.
You will report to the team's engineering manager.
Requirements:
- Bachelor's or Master's degree in computer science, software engineering, or related technical discipline.
- 8+ years of professional experience as a software engineer with deep expertise in Go (Golang), distributed systems, and backend/network service development at scale.
- Demonstrated experience architecting highly concurrent, distributed systems and exercising independent judgment on methods, techniques, and evaluation criteria, including Go's standard networking and cryptography libraries.
- Strong understanding of distributed systems, network protocols, and API design (gRPC/Protobuf and/or RESTful APIs), with ability to reason about tradeoffs across entire systems.
- Experience with AWS (or another major cloud provider) and cloud-native deployment models at production scale.
- Strong problem-solving and analytical skills; ability to convey advanced technical concepts and persuade diverse stakeholders.
- Proven ability to build formal working relationships and coordinate across multiple teams and functions.
- Conceptual thinking skills to understand advanced technical issues and their broader business implications.
- Demonstrated track record mentoring engineers and being recognized as a subject matter expert.
Desirable qualifications:
- Experience with multiple cloud platforms (AWS, Azure, GCP).
- Experience establishing or influencing engineering-wide standards for Terraform automation and CI/CD pipelines.
- Deep expertise with secure protocols, mTLS and PKI, secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault), and credential brokering.
- Familiarity with proxying database, SSH/RDP, Kubernetes, and HTTP traffic; building CLI or desktop client tooling.
- Experience shaping Zero Trust architecture strategy, just-in-time access models, and policy-as-code (e.g., Cedar) at organizational level.
Note: Delinea is not considering candidates requiring any type of US work authorization now or in the future, including F1-OPT, F1-CPT, H-1B, TN, L-1, J1, etc.
