Lead Software Engineer - (Secrets Manager & AI Identity)
- Role
- Backend
- Experience
- Lead
- Employment
- Full-time
Open to US only. Set where you work from to check your eligibility.
No BS summary
As a Senior Software Engineer on Bitwarden’s Secrets Manager & AI Identity team, you will lead the design and development of our next-generation privileged access platform. You'll own critical gateway services, terminal access protocols, and auditing/enforcement at the intersection of security, scalability, and user experience.
Core skills
Required skills
Optional skills
Required languages
Lead Software Engineer - (Secrets Manager & AI Identity)
at Bitwarden in Engineering
Remote, U.S.
About Bitwarden
Bitwarden is the trusted identity security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere. Bitwarden makes it easy for all users to extend robust security across their devices with password management, secrets management, and passwordless and passkey innovations. The company is headquartered in Santa Barbara, California. Learn more at bitwarden.com .
The Role
As a Senior Software Engineer on Bitwarden’s Secrets Manager & AI Identity team, you will lead the design and development of our next-generation privileged access platform. You'll own critical gateway services, terminal access protocols, and auditing/enforcement at the intersection of security, scalability, and user experience.
In alignment with our modern True Ownership model, our engineers are "T-shaped" professionals who own their services end-to-end—from initial design and secure development to automated testing, deployment, and operational health in production. This role offers unique opportunities to build secure-by-default patterns and make significant contributions to our open-source security ecosystem.
This is an all-remote team and we’re looking for someone located in the US. We do not offer visa sponsorship at this time.
RESPONSIBILITIES
End-to-End Delivery: Support Bitwarden goals by designing, developing, testing, deploying, and operating secure, performant gateway controls, audited terminal logins, and session recording mechanics for our PAM product line. Decoupled Architecture: Maintain strict service boundaries and design resilient APIs that allow the PAM platform to operate as an independent, decoupled tenant on our core platform infrastructure. Upstream Collaboration: Partner closely in a co-located, cross-functional "Embedded Trio" (Product, Design, and Engineering) to rapidly design and validate technical solutions prior to code implementation. Automated Quality: Eliminate manual testing barriers by building and maintaining robust automated test suites, integration harnesses, and CI/CD pipelines for your team's services. Operational Stewardship: Own the operational health, performance, and reliability telemetry of your services in production, proactively participating in sustainable on-call rotations and postmortem analyses. Documentation: Build and maintain high-quality internal architecture specifications, API contracts, and external open-source developer documentation.
WHAT YOU BRING TO BITWARDEN
Overall Experience: 10-15 years as a Software Engineer with team lead experience Technical Stack: Strong proficiency and experience in AI-Led Development in C# / .NET, Rust, or TypeScript. Security Domain Expertise: Practical experience designing or implementing secure gateway architectures, reverse proxies, and session proxying (SSH, RDP, or HTTPS). Identity & Auditing: Understanding of Identity and Access Management, key-rotation protocols, and real-time audit logging systems. T-Shaped Engineering Mindset: Practical experience with containerized environments (Docker/Kubernetes), automated test frameworks (unit, integration, and end-to-end), and SRE/observability tools (APM, alerting, and telemetry dashboards). Secure Coding: Familiarity with zero-trust and zero-knowledge security architectures, encryption standards, and threat-modeling methodologies. Collaborative Spirit: A highly collaborative and adaptable mindset, excited to work in rapid, outcome-driven feedback loops. Open Source Passion: Excitement and enthusiasm for open source, developer advocacy, and building a more secure internet. Problem-Solving: Excellent problem-solving skills—valuing written, clear documentation and using data to make technical decisions.
WHAT TO EXPECT IN THE INTERVIEW PROCESS
Meeting with our Recruiting team Interview with Engineering Manager Interview/s with team members Reference calls
A FEW REASONS TO WORK WITH US
Our user community loves us and we love them. Come to work each day with a sense of purpose as we bring a more secure internet experience to everyone from our friends and family to the world’s largest organizations. Become an expert. You’ll get immersed in the prominent technology markets of security and open source software. We are dedicated to building a diverse and talented team. Work remotely with motivated and supportive team members across the world. Learn and grow. Take on new challenges with the support of your team, and join our #growth-club to continue personal and professional development.
What you'll do
- Design, develop, test, deploy, and operate secure, performant gateway controls, audited terminal logins, and session recording mechanics for our PAM product line.
- Maintain strict service boundaries and design resilient APIs that allow the PAM platform to operate as an independent, decoupled tenant on our core platform infrastructure.
- Partner closely in a co-located, cross-functional "Embedded Trio" (Product, Design, and Engineering) to rapidly design and validate technical solutions prior to code implementation.
- Build and maintain robust automated test suites, integration harnesses, and CI/CD pipelines for your team's services.
- Own the operational health, performance, and reliability telemetry of your services in production, proactively participating in sustainable on-call rotations and postmortem analyses.
What they require
- 10-15 years as a Software Engineer with team lead experience
- Strong proficiency and experience in AI-Led Development in C# / .NET, Rust, or TypeScript.
- Practical experience designing or implementing secure gateway architectures, reverse proxies, and session proxying (SSH, RDP, or HTTPS).
- Understanding of Identity and Access Management, key-rotation protocols, and real-time audit logging systems.
- Practical experience with containerized environments (Docker/Kubernetes), automated test frameworks (unit, integration, and end-to-end), and SRE/observability tools (APM, alerting, and telemetry dashboards).
Benefits
- Work remotely with motivated and supportive team members across the world.
- Take on new challenges with the support of your team, and join our #growth-club to continue personal and professional development.
Bitwarden is an identity security company that helps enterprises, developers, and individuals securely manage and share sensitive information with password management, secrets management, passwordless, and passkey products.