Overview In this role you design and build the Key Management Service to securely generate and rotate keys, enabling high-performance cryptographic operations. You implement complex data flows like Envelope Encryption and manage DEK-KEK relationships for layered security. You develop Kubernetes operators to automate KMS and Secrets Manager lifecycles and expose robust REST APIs for key management and signing workflows. You own the software lifecycle in an You Build It – You Run It environment, aligning security engineering with SRE. You ensure standards-compliant crypto operations and auditable trails to support sovereign cloud requirements.
ResponsabilidadesDesign and develop Key Management Service (KMS) with secure key generation and rotationImplement Envelope Encryption and manage DEK/KEK relationshipsDevelop Kubernetes operators to automate KMS/Secrets Manager lifecycleBuild robust REST APIs for key rings, external key imports,
and signing workflowsOwn the software lifecycle in a You Build It – You Run It environmentEnsure cryptographic operations follow industry standards (AES, RSA, ECDSA, HMAC) with auditable trails for sovereign cloud compliance Requisitos principalesDeep enthusiasm for Software Engineering, Applied Cryptography, and Cloud-Native securityStrong SDLC ownership with Go and Kubernetes (K8s) as core skillsFamiliarity with or eagerness to master cryptographic algorithms (AES-GCM, RSA-OAEP, ECDSA) and secure key wrapping/transportUnderstanding of auditing and compliance needs in high-stakes cloud environmentsAbility to analyze data flows and optimize API payloads and cryptographic overhead for cost-efficiency and performanceWillingness to share security knowledge with the teamEnjoys sharing knowledge with the teamCuriosity about security standards and trendsProblem-solving mindset with bias for performance and cost-efficiencyGo programmingKubernetes (K8s) and Kubernetes operatorsKey Management Service (KMS) concepts