Software Engineer, Secrets Infrastructure

Job Overview

We're seeking a Software Engineer to join our Secrets Infrastructure team, which provides the cryptographic identity and secrets management foundation for Stripe. You will be responsible for building and maintaining the internal certificate authority and secrets platform that manages access to critical financial systems and external partners.

Responsibilities

• Design and implement significant features in our certificate authority and secrets management systems
• Work across Go, Java, Ruby, and Python to implement authentication and secrets infrastructure used by every service at Stripe
• Collaborate with other engineering teams to understand their needs and design secrets and identity integrations
• Develop certificate provisioning and secret management integrations for various compute platforms (Kubernetes, EC2, developer workstations)
• Work on reliability improvements to maintain 99.99%+ availability for critical infrastructure
• Participate in on-call rotation for critical infrastructure, working alongside senior engineers to debug and resolve production issues

Requirements

• 5+ years of professional software development experience
• Strong programming skills in Go, with significant experience in other similar system programming languages (C++, Rust, C#, etc) as a potential alternative
• 3+ years of infrastructure and security experience (can overlap with other experience)
• Experience in cryptography, PKI, secret management, or other security topics
• Familiarity with infrastructure tools like Kubernetes, Terraform, and cloud platforms
• Interest in security, infrastructure, and software development
• Enthusiasm for learning new technologies and working across multiple programming languages
• Strong debugging and problem-solving skills
• Clear verbal and written communication skills and ability to collaborate effectively with other engineers
• Experience leading cross-team projects and building alignment on multi-team technical direction
• Strong technical writing skills to write design documents
• On-call experience

Preferred Qualifications

• Prior experience building PKI or secret management infrastructure
• Experience in Java, Ruby, or Python
• Experience building developer tools, libraries, or platform services
• Experience with kubernetes internals
• Experience operating complex services on AWS
• Experience in fully remote work environments