> Markdown version of [/jobs/ext/1022567-principal-software-engineer](https://www.wearedevelopers.com/jobs/ext/1022567-principal-software-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Software Engineer - **Company:** DigitalOcean, LLC - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $235,200.0 - $294,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cloud Engineering, Code Review, Data Security, Distributed Systems, Infrastructure as a Service (IaaS), Identity and Access Management, Key Management, MySQL, OAuth, Open Source Technology, OpenID, Role-Based Access Control, Digitalocean, Azure Machine Learning, Security Assertion Markup Language (SAML), Software Engineering, SQL Databases, Cloud Platform System, Kubernetes, Low Latency, Hashicorp, Build Tools, Terraform, Microservices - **Published:** June 7, 2026 - **Apply:** https://www.dice.com/job-detail/a7ff0b68-fb74-4226-8284-97fd5e7ba9ae ## About the Role * Experience: 10+ years of software engineering experience, with at least 4+ years focused on Identity (AuthN/AuthZ), Key Management, or high-scale distributed systems in a cloud or IaaS environment * Language Expert: Expert-level proficiency in Go and deep experience with gRPC microservices architecture * Identity Specialist: Deep knowledge of identity protocols (OIDC, OAuth2, SAML, SCIM) and access control models (RBAC, ABAC, PBAC), with a track record of delivering these at cloud scale * Cryptography & KMS: Hands-on experience designing or operating key management infrastructure, including envelope encryption, HSM integration, and BYOK/CMEK patterns * Distributed Systems: Proven ability to build systems that handle consensus, replication, and partitioning at scale with strong reliability and observability * Cloud Native: Deep experience with Kubernetes, SQL (MySQL), and Infrastructure as Code (Terraform) * Technical Leadership: Demonstrated track record of driving ambiguous, multi-team platform initiatives from problem definition through to shipped, production capability * Communication: Ability to write crisp RFCs, present architectural strategy to senior leadership, and align diverse teams around a shared technical direction Nice to Have * Experience with SPIFFE/SPIRE or workload identity federation * Familiarity with secrets management platforms (e.g., HashiCorp Vault) * Contributions to open-source identity or cryptography projects, * We innovate with purpose. You'll be a part of a cutting-edge technology company with an upward trajectory, who are proud to simplify cloud and AI so builders can spend more time creating software that changes the world. As a member of the team, you will be a Shark who thinks big, bold, and scrappy, like an owner with a bias for action and a powerful sense of responsibility for customers, products, employees, and decisions. ## Description Architect for Hyperscale: Design high-availability, low-latency identity and key management services in Go that handle massive, sustained load across global regions with strong consistency and full auditability. Lead Next-Gen Identity: Architect secure token exchange patterns and identity context injection for agentic AI workflows, building the IAM foundations that underpin DigitalOcean's emerging AI/ML platform offerings. Evolve Key Management: Design and deliver a robust, multi-tenant KMS, including envelope encryption, customer-managed key patterns, and HSM-backed key material, that gives customers deep, fine-grained control over their data security posture. Solve Complex AuthZ at Scale: Drive the evolution of our Policy Engine (Rego/OPA) to support advanced resource-level permissions, dynamic scoping, network-aware access conditions, and the complex authorization demands of agentic workflows. Drive Cross-Team Impact: Partner with Inference, Billing, DOKS, and Platform Security to resolve architectural gaps that span multiple teams. Serve as the connective tissue between identity and the broader cloud platform and ensure security is an enabler of developer velocity, not an obstacle. Set Engineering Standards: Establish cryptographic and identity engineering standards adopted org-wide. Lead design reviews for changes with cross-cutting platform risk and author RFCs that shape DigitalOcean's technical direction. Mentor & Grow the Organization: Mentor and develop senior and mid-level engineers across IAM and adjacent teams. Conduct deep code reviews, model architectural thinking, and build a culture of security-first engineering. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Inside Bitpanda's Tech Stack: Scaling a European Fintech Leader - Markus Dorner](https://www.wearedevelopers.com/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner) - [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)