Staff Software Engineer-Security Products

Experience: 10+ years of software engineering experience, with 5+ years of sustained focus on security-critical systems — spanning at least two of: Identity/IAM, cryptographic systems/KMS, cloud security posture, or infrastructure security — at cloud or enterprise scale.

Language Expert: Expert-level proficiency in Go, with deep experience building and operating security-critical, high-scale distributed services in production.

Identity Authority: Deep knowledge of identity protocols (OIDC, OAuth2, SAML, SCIM) and access control models (RBAC, ABAC, PBAC); able to design novel identity systems — including workload and agent identity — not just implement existing patterns.

Cryptography Authority: Sound applied cryptography fundamentals — symmetric and asymmetric primitives, key derivation hierarchies, authenticated encryption, envelope encryption patterns — and a track record of designing cryptographic systems correctly under real operational constraints.

Posture Systems: Experience designing or operating CSPM or ISPM systems — including resource discovery, policy evaluation at scale, misconfiguration detection, and risk signal aggregation. Familiarity with cloud resource models (DigitalOcean, AWS, GCP, or Azure) and the control frameworks that govern them (CIS Benchmarks, NIST CSF, or equivalent).

Cross-Domain Integration: Demonstrated ability to design systems where identity, key management, and posture signals compose — rather than operating in isolation. Candidates who have worked at the intersection of two or more of these domains are strongly preferred.

Distributed Systems Mastery: Proven ability to design and operate systems at cloud scale — handling consensus, replication, partitioning, and failure recovery under real production conditions — with security and auditability as first-class constraints.

Organizational Influence: Track record of driving technical alignment across multiple engineering teams or organizations — including resolving architectural conflicts, establishing cross-team standards, and influencing roadmaps beyond your direct area of ownership.

Communication: Demonstrated ability to translate complex security platform strategy into business impact and compliance posture for executive and board-level audiences.

Experience with Open Policy Agent (OPA), Rego, or other policy-as-code frameworks at production scale.

Familiarity with SPIFFE/SPIRE, WIMSE, or other workload identity frameworks.

Experience with HSMs (Thales/Luna, AWS CloudHSM, or equivalent) and production-grade key management platforms.

Familiarity with post-quantum cryptography standards (NIST PQC: ML-KEM, ML-DSA) and migration planning for production key hierarchies.

Experience with PKCS#11, KMIP, or other KMS/HSM interoperability standards.

Background contributing to open-source security projects or engaging with standards bodies (IETF, OpenID Foundation, NIST).

Prior experience designing security platform strategy for AI-native or inference-heavy workloads.

Background supporting HIPAA, SOC 2, ISO 27001, or FedRAMP compliance programs from an engineering ownership perspective.

*This job is located in Bengaluru, India

JR: 2026-7959

#LI-Hybrid

We innovate with purpose. You’ll be a part of a cutting-edge technology company with an upward trajectory, who are proud to simplify cloud and AI so builders can spend more time creating software that changes the world. As a member of the team, you will be a Shark who thinks big, bold, and scrappy, like an owner with a bias for action and a powerful sense of responsibility for customers, products, employees, and decisions.

We prioritize career development. At DO, you’ll do the best work of your career. You will work with some of the smartest and most interesting people in the industry. We are a high-performance organization that will always challenge you to think big. Our organizational development team will provide you with resources to ensure you keep growing. We provide employees with reimbursement for relevant conferences, training, and education. All employees have access to LinkedIn Learning's 10,000+ courses to support their continued growth and development.

We care about your well-being. Regardless of your location, we will provide you with a competitive array of benefits to support you from our Employee Assistance Program to Local Employee Meetups to flexible time off policy, to name a few. While the philosophy around our benefits is the same worldwide, specific benefits may vary based on local regulations and preferences.

We reward our employees. The salary range for this position is based on market data, relevant years of experience, and skills. You may qualify for a bonus in addition to base salary; bonus amounts are determined based on company and individual performance. We also provide equity compensation to eligible employees, including equity grants upon hire and the option to participate in our Employee Stock Purchase Program.

DigitalOcean is an equal-opportunity employer. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.