Software Engineer, Secrets Infrastructure

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team The Secrets Infrastructure team provides the cryptographic identity and secrets management foundation for Stripe. We build and operate the internal certificate authority that authenticates every person and service at Stripe, and the secrets platform that manages everything from financial partner credentials to infrastructure access keys. We build foundational security infrastructure at scale: our certificate authority issues mTLS client certificate identities for thousands of services and engineers, and our secrets platform and libraries protect access to critical financial systems and external partners across all of Stripe’s codebases, services, and platforms. The technical challenges include building systems with 99.99%+ availability, implementing TLS workload identity and attestation logic for new platforms, and designing secret management tools that are both secure and user-friendly. Our infrastructure must be both reliable and developer-friendly—we maintain libraries in Go, Java, Ruby, and Python. As a small team responsible for critical systems, engineers take on meaningful ownership. Through collaboration with teams across Stripe, you'll build and set direction for the authentication and secrets management underpin identity in distributed systems at scale. Secrets Infrastructure is a fully remote team, with a small presence in the Seattle and New York City offices. We pride ourselves on a friendly, technically rigorous, and supportive team culture. What you'll do You'll be responsible for TLS identity and secrets infrastructure that every Stripe service depends on. You'll build infrastructure, developer tools, and guide partner teams on architecture decisions; we regularly need to help other teams reason about cryptographic primitives and PKI, transitive trust, potential failure modes and threat models. Since our infrastructure and libraries are used across the entire Stripe codebase, you'll work in Go, Java, Ruby, and Python. The services we own are written in Go, so most of your hands‑on work will be in Go. The typical balance of hands‑on work is about 60% coding, 20% infrastructure work, and 20% security design/guidance with partner teams. Responsibilities Design and implement significant features in our certificate authority and secrets management systems Work across Go, Java, Ruby, and Python to implement authentication and secrets infrastructure used by every service at Stripe Work with with other engineering teams to understand their needs and design secrets and identity integrations Develop certificate provisioning and secret management integrations for various compute platforms (Kubernetes, EC2, developer workstations) Work on reliability improvements to maintain 99.99%+ availability for critical infrastructure; we take pride in making failure modes impossible instead of reacting to them Participate in on‑call rotation for critical infrastructure, working alongside senior engineers to debug and resolve production issues Who you are We’re looking for a senior candidate who has enough prior experience in security, backend API development, and infrastructure to quickly take responsibility for significant projects. We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. 5+ years of professional software development experience. Strong programming skills in Go, with significant experience in other similar system programming languages (C++, Rust, C#, etc) as a potential alternative. 3+ years of infrastructure and security experience (can overlap with other experience) Experience in cryptography, PKI, secret management, or other security topics Familiarity with infrastructure tools like Kubernetes, Terraform, and cloud platforms Interest in security, infrastructure, and software development Enthusiasm for learning new technologies and working across multiple programming languages Strong debugging and problem‑solving skills; the team maintains and troubleshoots integrations across all Stripe languages and infrastructure Clear verbal and written communication skills and ability to collaborate effectively with other engineers Experience leading cross‑team projects and building alignment on multi‑team technical direction Strong technical writing skills to write design documents Preferred qualifications Prior experience building PKI or secret management infrastructure (as an SWE - not just provisioning a 3rd party tool or service) Experience in Java, Ruby, or Python Experience building developer tools, libraries, or platform services Experience with kubernetes internals (how the platform works, not just as a user) Experience operating complex services on AWS Experience in fully remote work environments This role is available either in an office or a remote location (35+ miles or 56+ km from a Stripe office). Office‑assigned Stripes spend at least 50% of the time in a given month in their local office or with users. This hits a balance between bringing people together for in‑person collaboration and learning from each other, while supporting flexibility about how to do this in a way that makes sense for individuals and their teams. A remote location is defined as being 35 miles (56 kilometers) or more from one of our offices. While you would be welcome to come into the office for team/business meetings, on‑sites, meet‑ups, and events, our expectation is you would regularly work from home rather than a Stripe office. Stripe does not cover the cost of relocating to a remote location. We encourage you to apply for roles that match the location where you currently live or plan to live. The annual US base salary range for this role is $170,400 - $255,700. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. This salary range may be inclusive of several career levels at Stripe and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location. Applicants interested in this role and who are not located in the US may request the annual salary range for their location during the interview process. Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends. At Stripe, we're looking for people with passion, grit, and integrity. You're encouraged to apply even if your experience doesn't precisely match the job description. Your skills and passion will stand out—and set you apart—especially if your career has taken some extraordinary twists and turns. At Stripe, we welcome diverse perspectives and people who think rigorously and aren't afraid to challenge assumptions. Join us. #J-18808-Ljbffr