Overview
Se pueden requerir diversas habilidades interpersonales y experiencia para el siguiente puesto. Por favor, asegúrese de consultar la descripción a continuación con atención.
In this role you design and build the Key Management Service to securely generate and rotate keys, enabling high-performance cryptographic operations. You implement complex data flows like Envelope Encryption and manage DEK-KEK relationships for layered security. You develop Kubernetes operators to automate KMS and Secrets Manager lifecycles and expose robust REST APIs for key management and signing workflows. You own the software lifecycle in an You Build It – You Run It environment, aligning security engineering with SRE. You ensure standards-compliant crypto operations and auditable trails to support sovereign cloud requirements.
Responsabilidades
Design and develop Key Management Service (KMS) with secure key generation and rotation
Implement Envelope Encryption and manage DEK/KEK relationships
Develop Kubernetes operators to automate KMS/Secrets Manager lifecycle
Build robust REST APIs for key rings, external key imports, and signing workflows




Own the software lifecycle in a You Build It – You Run It environment
Ensure cryptographic operations follow industry standards (AES, RSA, ECDSA, HMAC) with auditable trails for sovereign cloud compliance
Requisitos principales
Deep enthusiasm for Software Engineering, Applied Cryptography, and Cloud-Native security
Strong SDLC ownership with Go and Kubernetes (K8s) as core skills
Familiarity with or eagerness to master cryptographic algorithms (AES-GCM, RSA-OAEP, ECDSA) and secure key wrapping/transport
Understanding of xqbhyrx auditing and compliance needs in high-stakes cloud environments
Ability to analyze data flows and optimize API payloads and cryptographic overhead for cost-efficiency and performance
Willingness to share security knowledge with the team
Enjoys sharing knowledge with the team
Curiosity about security standards and trends
Problem-solving mindset with bias for performance and cost-efficiency
Go programming
Kubernetes (K8s) and Kubernetes operators
Key Management Service (KMS) concepts

📌 STACKIT Platform Services - Secrets Manager & KMS - Software Engineer (m/f/d) (Barcelona)
🏢 Schwarz Gruppe
📍 Barcelona