Lead Principal Software Engineer - Secrets Management
- Compensation
- Not disclosed
- Location
- Nashville, TN, United States
- Work setup
- Not specified
- Seniority
- Principal
- Employment
- Not specified
- Experience
- Not specified
- Category
- Software engineering
- Posted
Skills
Must have
- Deep experience designing and operating distributed backend services in production at meaningful scale.
- Strong security engineering judgment across access control, encryption, identity, trust boundaries, key management, certificate lifecycle, and failure modes.
- Experience building reliable APIs, automation, and developer-facing infrastructure used by multiple engineering teams.
- Operational excellence in observability, incident response, reliability engineering, scalability, and safe production change management.
- Ability to lead ambiguous technical programs, make durable architecture decisions, influence across teams, and mentor engineers.
- Comfort working with application, infrastructure, identity, and security partners on high-trust, security-sensitive systems.
- Practical experience with threat modeling, security reviews, hardening, and production risk reduction for sensitive-data systems.
Full description
Responsibilities
-
Design and build secure backend services that store, manage, rotate, and deliver secrets, keys, certificates, and related sensitive materials.
-
Improve key exchange mechanisms so software services can securely communicate, establish trust, and protect sensitive information in transit and at rest.
-
Make secret rotation safer and more automated, reducing service breakage, manual handling, and unsafe credential storage patterns.
-
Build reliable APIs, tooling, and workflows that help other engineering teams adopt secrets and key-management capabilities with less friction.
-
Improve availability, scalability, monitoring, alerting, and operational safety for security-critical production systems.
-
Lead threat modeling, security reviews, design hardening, and sensitive-data exposure analysis across service boundaries.
-
Partner with application, infrastructure, identity, and security teams to make secret management more consistent across the company.
-
Own production quality through incident response, debugging, operational improvements, resiliency work, and reduction of manual operations.
-
Lead complex projects independently, drive alignment across teams, mentor engineers, and raise the engineering bar for security-sensitive systems.
Qualifications
-
Deep experience designing and operating distributed backend services in production at meaningful scale.
-
Strong security engineering judgment across access control, encryption, identity, trust boundaries, key management, certificate lifecycle, and failure modes.
-
Experience building reliable APIs, automation, and developer-facing infrastructure used by multiple engineering teams.
-
Operational excellence in observability, incident response, reliability engineering, scalability, and safe production change management.
-
Ability to lead ambiguous technical programs, make durable architecture decisions, influence across teams, and mentor engineers.
-
Comfort working with application, infrastructure, identity, and security partners on high-trust, security-sensitive systems.
-
Practical experience with threat modeling, security reviews, hardening, and production risk reduction for sensitive-data systems.