What you'll do
You'll be responsible for TLS identity and secrets infrastructure that every Stripe service depends on. You'll build infrastructure, developer tools, and guide partner teams on architecture decisions; we regularly need to help other teams reason about cryptographic primitives and PKI, transitive trust, potential failure modes and threat models.
Since our infrastructure and libraries are used across the entire Stripe codebase, you'll work in Go, Java, Ruby, and Python. The services we own are written in Go, so most of your hands-on work will be in Go. The typical balance of hands-on work is about 60% coding, 20% infrastructure work, and 20% security design/guidance with partner teams.
Responsibilities
- Design and implement significant features in our certificate authority and secrets management systems
- Work across Go, Java, Ruby, and Python to implement authentication and secrets infrastructure used by every service at Stripe
- Work with with other engineering teams to understand their needs and design secrets and identity integrations
- Develop certificate provisioning and secret management integrations for various compute platforms (Kubernetes, EC2, developer workstations)
- Work on reliability improvements to maintain 99.99%+ availability for critical infrastructure; we take pride in making failure modes impossible instead of reacting to them
- Participate in on-call rotation for critical infrastructure, working alongside senior engineers to debug and resolve production issues