Lead Software Engineer – Privileged Access Management

About the role

Bitwarden is looking for a Lead Software Engineer to own the design and delivery of its next‑generation privileged access platform. You will drive the development of secure gateway services, terminal access protocols and audit mechanisms while shaping the open‑source security ecosystem.

Key responsibilities

• Design, develop, test, deploy and operate high‑performance gateway controls, audited terminal logins and session recording for the PAM product line.
• Maintain strict service boundaries and resilient APIs to keep the PAM platform decoupled from core infrastructure.
• Collaborate with product, design and engineering partners in an “Embedded Trio” to validate solutions before implementation.
• Build and maintain automated test suites, integration harnesses and CI/CD pipelines to eliminate manual testing.
• Own operational health, performance telemetry and on‑call rotation for services in production.
• Produce and keep up‑to‑date architecture specifications, API contracts and open‑source developer documentation.

Required profile

• 8+ years of software engineering experience with proven lead or team‑lead responsibilities.
• Track record of setting high standards for code review, testing, error handling and secure coding practices.
• Experience guiding technical direction, mentoring senior engineers and delivering outcomes you did not code yourself.
• Strong understanding of identity and access management, key‑rotation protocols and real‑time audit logging.
• Familiarity with zero‑trust, zero‑knowledge architectures and threat‑modeling methodologies.

Required skills

• C# / .NET, Rust, TypeScript.
• AI‑assisted development practices.
• Docker and Kubernetes container orchestration.
• Automated testing frameworks (unit, integration, end‑to‑end) and CI/CD pipelines.
• Secure gateway design, reverse proxies and session proxying (SSH, RDP, HTTPS).
• Observability tools such as APM, alerting systems and telemetry dashboards.