Senior Software Engineer (Security)

Company DescriptionAbout MirantisMirantis, an IREN company, is the Kubernetes-native AI infrastructure company, enabling organizations to build and operate scalable, secure, and sovereign infrastructure for modern AI, machine learning, and data-intensive applications. By combining open source innovation with deep expertise in Kubernetes orchestration, Mirantis empowers platform engineering teams to deliver composable, production-ready developer platforms across any environment—on-premises, in the cloud, at the edge, or in sovereign data centers. As enterprises navigate the growing complexity of AI-driven workloads, Mirantis delivers the automation, GPU orchestration, and policy-driven control needed to manage infrastructure with confidence and agility. Committed to open standards and freedom from lock-in, Mirantis ensures that customers retain full control of their infrastructure strategy. Job DescriptionWe're looking for a Senior Software Engineer specializing in Secrets Management and Public Key Infrastructure (PKI) to join our team in Campbell, United States. In this role, you will design, develop, and maintain secure systems that protect sensitive credentials and cryptographic assets across our organization. You'll work on complex infrastructure challenges, ensuring that secrets management and PKI solutions are robust, scalable, and compliant with industry security standards. This is an excellent opportunity for a detail-oriented engineer who is passionate about security and infrastructure excellence.Design and implement enterprise-grade secrets management solutions using industry-leading platforms such as HashiCorp Vault, AWS Secrets Manager, or Azure Key VaultDevelop and maintain Public Key Infrastructure (PKI) systems, including certificate lifecycle management, certificate authority operations, and cryptographic key managementArchitect secure credential rotation mechanisms and automated provisioning workflows to minimize security risksCollaborate with security, infrastructure, and application teams to integrate secrets management and PKI solutions across the organizationConduct security audits and vulnerability assessments of existing secrets management and PKI implementationsDevelop comprehensive documentation, runbooks, and best practice guides for secrets management and PKI operationsTroubleshoot and resolve complex issues related to certificate management, key storage, and credential accessStay current with emerging security threats, cryptographic standards, and industry best practices in secrets management and PKIMentor junior engineers and contribute to the development of security-focused engineering practicesEnsure compliance with regulatory requirements and organizational security policiesQualificationsRequired Qualifications:5+ years of professional software engineering experience with a focus on infrastructure and security systems3+ years of hands-on experience with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or equivalent)Strong expertise in Public Key Infrastructure (PKI), certificate management, and X.509 standardsProficiency in cryptographic concepts, encryption protocols, and secure key management practicesExperience with Hardware Security Modules (HSMs) and cryptographic hardware integrationSolid programming skills in languages such as Go, Python, Java, or C++Deep understanding of identity and access management (IAM) principles and practicesExperience with infrastructure-as-code tools and automation frameworksStrong analytical and problem-solving skills with meticulous attention to detailExcellent communication skills and ability to work effectively across technical and non-technical teamsPreferred Qualifications:Experience with cloud-native security architectures and containerized environmentsFamiliarity with security compliance frameworks (FIPS 140-2, SOC 2, ISO 27001)Knowledge of certificate transparency and OCSP (Online Certificate Status Protocol)Experience with security incident response and forensicsContributions to open-source security projects or communitiesExperience with CI/CD pipeline security and secrets scanning toolsUnderstanding of zero-trust security models and their implementationAdditional InformationWhy you’ll love MirantisBuild the observability foundation for the AI cloud era, working directly with leading GPU cloud operators, NeoClouds, sovereign clouds, and AI-first enterprisesCollaborate with a world-class, distributed team committed to openness and technical excellenceShape the product narrative and influence go-to-market successIt is understood that Mirantis, Inc. may use automated decision-making technology (ADMT) for specific employment-related decisions. Opting out of ADMT use is requested for decisions about evaluation and review connected with the specific employment decision for the position applied for. You also have the right to appeal any decisions made by ADMT by sending your request to View email address on click.appcast.io submitting your resume, you consent to the processing and storage of your personal data in accordance with applicable data protection laws, for the purposes of considering your application for current and future job opportunities.#remoteWe are a Leader for Container Management in G2 (#2 after AWS)!SummaryType: Full-timeFunction: EngineeringExperience level: Mid-Senior LevelIndustry: Computer Software