Overview

In this role you design and build the Key Management Service to securely generate and rotate keys, enabling high-performance cryptographic operations. You implement complex data flows like Envelope Encryption and manage DEK-KEK relationships for layered security. You develop Kubernetes operators to automate KMS and Secrets Manager lifecycles and expose robust REST APIs for key management and signing workflows. You own the software lifecycle in an You Build It – You Run It environment, aligning security engineering with SRE. You ensure standards-compliant crypto operations and auditable trails to support sovereign cloud requirements.

Responsabilidades

- Design and develop Key Management Service (KMS) with secure key generation and rotation
- Implement Envelope Encryption and manage DEK/KEK relationships
- Develop Kubernetes operators to automate KMS/Secrets Manager lifecycle
- Build robust REST APIs for key rings, external key imports, and signing workflows
- Own the software lifecycle in a You Build It – You Run It environment




- Ensure cryptographic operations follow industry standards (AES, RSA, ECDSA, HMAC) with auditable trails for sovereign cloud compliance

Requisitos principales

- Deep enthusiasm for Software Engineering, Applied Cryptography, and Cloud-Native security
- Strong SDLC ownership with Go and Kubernetes (K8s) as core skills
- Familiarity with or eagerness to master cryptographic algorithms (AES-GCM, RSA-OAEP, ECDSA) and secure key wrapping/transport
- Understanding of auditing and compliance needs in high-stakes cloud environments
- Ability to analyze data flows and optimize API payloads and cryptographic overhead for cost-efficiency and performance
- Willingness to share security knowledge with the team

- Enjoys sharing knowledge with the team
- Curiosity about security standards and trends
- Problem-solving mindset with bias for performance and cost-efficiency
- Go programming
- Kubernetes (K8s) and Kubernetes operators
- Key Management Service (KMS) concepts

📌 STACKIT Platform Services - Secrets Manager & KMS - Software Engineer (m/f/d) (Barcelona)
🏢 Schwarz Gruppe
📍 Barcelona