Tech Stack
Tag name is followed by "@" symbol and proficiency level value.
About proficiency levels:
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
AWS @ 4
Communication @ 6
Debugging @ 7
Go @ 7
Java @ 4
Kubernetes @ 3
PKI @ 4
Payments
Python @ 4
Ruby @ 4
Rust @ 7
Security @ 6
Software Development @ 6
Terraform @ 3
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Details
Who We Are
Stripe is a financial infrastructure platform for businesses. Millions of companies use Stripe to accept payments, grow revenue, and accelerate new business opportunities. The company’s mission is to increase the GDP of the internet.
About the Team
The Secrets Infrastructure team provides Stripe’s cryptographic identity and secrets management foundation. The team builds and operates the internal certificate authority that authenticates every person and service at Stripe, as well as the secrets platform that manages financial partner credentials and infrastructure access keys.
The team builds foundational security infrastructure at scale, including an mTLS client certificate authority for thousands of services and engineers, and secrets platforms and libraries that protect critical financial systems and external partners across Stripe’s codebases, services, and platforms. Technical challenges include maintaining 99.99%+ availability, implementing TLS workload identity and attestation logic for new platforms, and designing secure, user-friendly secrets management tools.
The team maintains libraries in Go, Java, Ruby, and Python. Its services are primarily written in Go. Secrets Infrastructure is a fully remote team with a small presence in the Seattle and New York City offices.
Responsibilities
- Design and implement significant features in certificate authority and secrets management systems.
- Work across Go, Java, Ruby, and Python to implement authentication and secrets infrastructure used by every service at Stripe.
- Collaborate with engineering teams to understand their needs and design secrets and identity integrations.
- Develop certificate provisioning and secret management integrations for Kubernetes, EC2, and developer workstations.
- Improve reliability to maintain 99.99%+ availability for critical infrastructure.
- Participate in an on-call rotation for critical infrastructure, debugging and resolving production issues alongside senior engineers.
- Build infrastructure and developer tools, and guide partner teams on architecture decisions involving cryptographic primitives, PKI, transitive trust, failure modes, and threat models.
- Spend approximately 60% of time coding, 20% on infrastructure work, and 20% on security design and guidance with partner teams.
Requirements
- 5+ years of professional software development experience.
- Strong programming skills in Go, with significant experience in similar system programming languages such as C++, Rust, or C# considered as a potential alternative.
- 3+ years of infrastructure and security experience, which may overlap with other experience.
- Experience with cryptography, PKI, secret management, or other security topics.
- Familiarity with infrastructure tools such as Kubernetes, Terraform, and cloud platforms.
- Interest in security, infrastructure, and software development.
- Enthusiasm for learning new technologies and working across multiple programming languages.
- Strong debugging and problem-solving skills.
- Clear verbal and written communication skills and the ability to collaborate effectively with other engineers.
- Experience leading cross-team projects and building alignment on multi-team technical direction.
- Strong technical writing skills for creating design documents.
- On-call experience.
Preferred Qualifications
- Experience building PKI or secret management infrastructure as a software engineer, rather than only provisioning a third-party tool or service.
- Experience with Java, Ruby, or Python.
- Experience building developer tools, libraries, or platform services.
- Experience with Kubernetes internals.
- Experience operating complex services on AWS.
- Experience working in fully remote environments.