Software Engineer II – Key Management Systems

About the role

DigitalOcean is looking for a Software Engineer II to join the Security Products team focused on Key Management Systems (KMS). You will help build and maintain the platform that secures customer data through encryption, key lifecycle management, and secret handling. This role offers deep exposure to applied cryptography and cloud‑native security engineering.

Key responsibilities

• Design, implement, and ship features and bug fixes for KMS services using Go within established architectural patterns.
• Develop and maintain key generation, rotation, and revocation workflows, ensuring robust, well‑tested cryptographic implementations.
• Write comprehensive unit and integration tests, participate in code reviews, and uphold high engineering standards for security‑sensitive code.
• Participate in on‑call rotations, troubleshoot production incidents, and create runbooks for operational ownership.
• Implement data‑encryption‑key (DEK) wrapping/unwrapping logic using key‑encryption‑key (KEK) hierarchies.
• Collaborate with IAM, Storage, and Database teams to integrate KMS capabilities across the platform.

Required profile

• 2–4 years of software engineering experience delivering production services.
• Proficiency in Go or another typed systems language with the ability to ramp quickly.
• Solid understanding of core cryptographic concepts (symmetric/asymmetric encryption, key derivation, hashing).
• Knowledge of distributed systems principles such as replication, latency trade‑offs, and failure modes.
• Experience with containerised environments (Kubernetes) and relational databases (PostgreSQL, MySQL).

Required skills

• Go programming language
• Kubernetes
• PostgreSQL and MySQL
• Terraform (preferred)
• gRPC microservices
• Hardware Security Modules (HSM) or cloud KMS services (AWS KMS, GCP Cloud KMS, HashiCorp Vault)