Senior Software Engineer II - Key Management Systems

About the role

DigitalOcean is looking for a Senior Software Engineer II to join its Security Products team and own key management services that protect customer data across the platform. You will work on a high‑availability, security‑critical KMS platform, shaping cryptographic design, hardening implementations, and driving compliance.

Key responsibilities

• Design and build high‑availability KMS services in Go, taking end‑to‑end ownership from design through production operation.
• Lead key lifecycle engineering, including generation, rotation, escrow, and destruction workflows with audit guarantees.
• Advance envelope encryption by scaling DEK/KEK hierarchies for storage, databases, and inference workloads.
• Integrate FIPS 140‑2 and SOC 2 compliance into engineering processes, covering audit logging and key material handling.
• Identify and remediate complex security vulnerabilities, from side‑channel risks to privilege‑escalation paths.
• Drive reliability and performance improvements, lead incident response and post‑mortems for security‑sensitive events.

Required profile

• 6+ years of software engineering experience, with 2‑3 years focused on cryptographic systems or security‑critical distributed services.
• Strong proficiency in Go and solid understanding of gRPC microservices architecture.
• Hands‑on experience with Hardware Security Modules or cloud KMS services (AWS KMS, GCP Cloud KMS, HashiCorp Vault, etc.).
• Familiarity with FIPS 140‑2, SOC 2, and other audit frameworks as they apply to key management.
• Deep knowledge of distributed systems concepts such as consensus, replication, and partitioning.
• Experience with Kubernetes, MySQL, and Infrastructure as Code (Terraform).
• Excellent communication skills for cross‑team collaboration.

Required skills

• Go
• gRPC
• AES‑GCM, RSA, ECDSA, HMAC, HKDF, PBKDF2
• Hardware Security Modules (HSM)
• AWS KMS, GCP Cloud KMS, HashiCorp Vault
• FIPS 140‑2, SOC 2 compliance
• Consensus algorithms, replication, partitioning
• Kubernetes
• MySQL
• Terraform