Lead Software Engineer

Role Description

As a Senior Software Engineer on Bitwarden’s Secrets Manager & AI Identity team, you will lead the design and development of our next-generation privileged access platform. You'll own critical gateway services, terminal access protocols, and auditing/enforcement at the intersection of security, scalability, and user experience.

In alignment with our modern True Ownership model, our engineers are "T-shaped" professionals who own their services end-to-end—from initial design and secure development to automated testing, deployment, and operational health in production. This role offers unique opportunities to build secure-by-default patterns and make significant contributions to our open-source security ecosystem.

This is an all-remote team and we’re looking for someone located in the US. We do not offer visa sponsorship at this time.

Responsibilities

• Support Bitwarden goals by designing, developing, testing, deploying, and operating secure, performant gateway controls, audited terminal logins, and session recording mechanics for our PAM product line.
• Maintain strict service boundaries and design resilient APIs that allow the PAM platform to operate as an independent, decoupled tenant on our core platform infrastructure.
• Partner closely in a co-located, cross-functional "Embedded Trio" (Product, Design, and Engineering) to rapidly design and validate technical solutions prior to code implementation.
• Eliminate manual testing barriers by building and maintaining robust automated test suites, integration harnesses, and CI/CD pipelines for your team's services.
• Own the operational health, performance, and reliability telemetry of your services in production, proactively participating in sustainable on-call rotations and postmortem analyses.
• Build and maintain high-quality internal architecture specifications, API contracts, and external open-source developer documentation.

Qualifications

• 10-15 years as a Software Engineer with team lead experience.
• Strong proficiency and experience in AI-Led Development in C# / .NET, Rust, or TypeScript.
• Practical experience designing or implementing secure gateway architectures, reverse proxies, and session proxying (SSH, RDP, or
• Understanding of Identity and Access Management, key-rotation protocols, and real-time audit logging systems.
• Practical experience with containerized environments (Docker/Kubernetes), automated test frameworks (unit, integration, and end-to-end), and SRE/observability tools (APM, alerting, and telemetry dashboards).
• Familiarity with zero-trust and zero-knowledge security architectures, encryption standards, and threat-modeling methodologies.
• A highly collaborative and adaptable mindset, excited to work in rapid, outcome-driven feedback loops.
• Excitement and enthusiasm for open source, developer advocacy, and building a more secure internet.
• Excellent problem-solving skills—valuing written, clear documentation and using data to make technical decisions.

Interview Process

• Meeting with our Recruiting team.
• Interview with Engineering Manager.
• Interview/s with team members.
• Reference calls.

Benefits

• Our user community loves us and we love them. Come to work each day with a sense of purpose as we bring a more secure internet experience to everyone from our friends and family to the world’s largest organizations.
• Become an expert. You’ll get immersed in the prominent technology markets of security and open source software.
• We are dedicated to building a diverse and talented team. Work remotely with motivated and supportive team members across the world.
• Learn and grow. Take on new challenges with the support of your team, and join our #growth-club to continue personal and professional development.