Logo for Bitwarden

Lead Software Engineer (Secrets Manager & AI Identity)

Role overview

Qualifications

  • 10-15 years as a Software Engineer with team lead experience
  • Strong proficiency in AI-Led Development in C# / .NET, Rust, or TypeScript
  • Practical experience designing secure gateway architectures and session proxying
  • Understanding of Identity and Access Management, key-rotation protocols, and audit logging systems

Responsibilities

  • Designing, developing, testing, deploying, and operating secure gateway controls and audited terminal logins
  • Maintaining strict service boundaries and designing resilient APIs
  • Collaborating in a cross-functional team to design and validate technical solutions
  • Building and maintaining robust automated test suites and CI/CD pipelines

About the company

Bitwarden logo

Bitwarden

Identity & Access Management (IAM)

Bitwarden empowers enterprises and individuals with trusted security solutions to manage sensitive information online. Explore Password Manager, Secrets Manager, and passkey innovations.

Company details

Company typeStartup
IndustryIdentity & Access Management (IAM)
Company size201 - 500

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Lead Software Engineer - (Secrets Manager & AI Identity)

at Bitwarden in Engineering

 

Remote, U.S.

 

About Bitwarden

Bitwarden is the trusted identity security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere. Bitwarden makes it easy for all users to extend robust security across their devices with password management, secrets management, and passwordless and passkey innovations. The company is headquartered in Santa Barbara, California. Learn more at bitwarden.com.

 

The Role

As a Senior Software Engineer on Bitwarden’s Secrets Manager & AI Identity team, you will lead the design and development of our next-generation privileged access platform. You'll own critical gateway services, terminal access protocols, and auditing/enforcement at the intersection of security, scalability, and user experience.

In alignment with our modern True Ownership model, our engineers are "T-shaped" professionals who own their services end-to-end—from initial design and secure development to automated testing, deployment, and operational health in production. This role offers unique opportunities to build secure-by-default patterns and make significant contributions to our open-source security ecosystem.

This is an all-remote team and we’re looking for someone located in the US. We do not offer visa sponsorship at this time.

 

RESPONSIBILITIES

  • End-to-End Delivery: Support Bitwarden goals by designing, developing, testing, deploying, and operating secure, performant gateway controls, audited terminal logins, and session recording mechanics for our PAM product line.
  • Decoupled Architecture: Maintain strict service boundaries and design resilient APIs that allow the PAM platform to operate as an independent, decoupled tenant on our core platform infrastructure.
  • Upstream Collaboration: Partner closely in a co-located, cross-functional "Embedded Trio" (Product, Design, and Engineering) to rapidly design and validate technical solutions prior to code implementation.
  • Automated Quality: Eliminate manual testing barriers by building and maintaining robust automated test suites, integration harnesses, and CI/CD pipelines for your team's services.
  • Operational Stewardship: Own the operational health, performance, and reliability telemetry of your services in production, proactively participating in sustainable on-call rotations and postmortem analyses.
  • Documentation: Build and maintain high-quality internal architecture specifications, API contracts, and external open-source developer documentation.

 

WHAT YOU BRING TO BITWARDEN

  • Overall Experience: 10-15 years as a Software Engineer with team lead experience
  • Technical Stack:Strong proficiency and experience in AI-Led Development in C# / .NET, Rust, or TypeScript.
  • Security Domain Expertise: Practical experience designing or implementing secure gateway architectures, reverse proxies, and session proxying (SSH, RDP, or HTTPS).
  • Identity & Auditing: Understanding of Identity and Access Management, key-rotation protocols, and real-time audit logging systems.
  • T-Shaped Engineering Mindset: Practical experience with containerized environments (Docker/Kubernetes), automated test frameworks (unit, integration, and end-to-end), and SRE/observability tools (APM, alerting, and telemetry dashboards).
  • Secure Coding: Familiarity with zero-trust and zero-knowledge security architectures, encryption standards, and threat-modeling methodologies.
  • Collaborative Spirit: A highly collaborative and adaptable mindset, excited to work in rapid, outcome-driven feedback loops.
  • Open Source Passion: Excitement and enthusiasm for open source, developer advocacy, and building a more secure internet.
  • Problem-Solving: Excellent problem-solving skills—valuing written, clear documentation and using data to make technical decisions.

WHAT TO EXPECT IN THE INTERVIEW PROCESS

  • Meeting with our Recruiting team
  • Interview with Engineering Manager
  • Interview/s with team members
  • Reference calls

A FEW REASONS TO WORK WITH US

  • Our user community loves us and we love them. Come to work each day with a sense of purpose as we bring a more secure internet experience to everyone from our friends and family to the world’s largest organizations.
  • Become an expert. You’ll get immersed in the prominent technology markets of security and open source software.
  • We are dedicated to building a diverse and talented team. Work remotely with motivated and supportive team members across the world.
  • Learn and grow. Take on new challenges with the support of your team, and join our #growth-club to continue personal and professional development. 

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Software Engineer Related jobs

Other jobs at Bitwarden

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.