Software Engineer (Secrets Manager & AI Identity)

Bitwarden is the trusted identity security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere. Bitwarden makes it easy for all users to extend robust security across their devices with password management, secrets management, and passwordless and passkey innovations. The company is headquartered in Santa Barbara, California. Learn more at bitwarden.com. #### **The Role** As we establish our India Engineering Center of Excellence (COE), we are looking for an experienced Software Engineers for our teams. As a Senior Software Engineer on Bitwarden’s Secrets Manager team, you will lead the development of our dedicated secrets engine, machine-to-machine (M2M) authorization protocols, and developer-focused CLI/SDKs [cite: bitwarden_teams_charter_strategy.md]. Looking ahead, you will play a pivotal role in designing and building the core infrastructure that extends Secrets Manager into our next-generation **AI Identity and Access** management platform—securing ciphers, credentials, and API keys against the unique custody risks of autonomous AI agents and headless workloads. In alignment with our modern **True Ownership** model, our engineers are "T-shaped" professionals who own their services end-to-end—from initial design and secure development to automated testing, deployment, and operational health in production [cite: Transforming Engineering Through Ownership]. You will collaborate closely in a synchronous "Embedded Trio" (Product, Design, and Engineering) to design and ship elegant, secure, and resilient code [cite: elt-modernization-blueprint.md]. #### **WHAT YOU WILL DO** - **Platform & Feature Development:** Design, build, and maintain high-performance APIs, SDKs, and CLIs for Secrets Manager and our future AI Identity and Access security frameworks [cite: bitwarden_teams_charter_strategy.md]. - **Machine & AI Identity Custody:** Implement secure, zero-knowledge machine authentication, scoped access tokens, and runtime secrets injection gateways that protect credentials from being exposed to parent AI models or local execution environments. - **Decoupled Architecture:** Work within our **Decoupled Platform Architecture** to ensure Secrets Manager operates as a highly scalable, independent tenant using its own dedicated data stores and asynchronous event-driven message networks [cite: elt-modernization-blueprint.md]. - **End-to-End Ownership:** Own the automated testing, deployment pipelines, and production SRE health of your team's services, participating in on-call rotations and postmortem analyses to drive continuous operational improvement [cite: elt-modernization-blueprint.md]. - **Developer Usability:** Build usable, highly developer-friendly API endpoints, integration libraries, and comprehensive technical documentation to lower the friction of secrets enrollment and machine onboarding [cite: bitwarden_teams_charter_strategy.md]. - **Security & Compliance:** Proactively threat-model new services, remediate security vulnerabilities, and ensure our secrets engine maintains our strict, audited compliance standards [cite: elt-modernization-blueprint.md]. #### **WHAT YOU BRING** - **Overall Experience:** 3-6 years in Software Engineering - **Technical Stack:** Strong proficiency and experience in AI-Led Development in C# / .NET/ Rust, or TypeScript (our core Secrets Manager SDK is built in Rust). - **Identity & Secrets Management:** Practical experience designing or integrating machine identity platforms, vaulting services, OAuth/OIDC, or token-based authorization structures (e.g., JWT, access tokens, API keys). - **AI/Agent Security Interest:** Curiosity or experience with the security implications of AI agent architectures, large language model (LLM) memory isolation, or sandboxed execution environments. - **T-Shaped Engineering Mindset:** Experience writing robust automated integration tests, maintaining containerized environments (Docker/Kubernetes), and using modern APM and SRE logging tools (e.g., Azure Monitor, Grafana) to monitor services in production [cite: Transforming Engineering Through Ownership]. - **Cryptographic Foundations:** Solid grasp of symmetric/asymmetric encryption, zero-knowledge protocols, and OS-level secure storage APIs [cite: Transforming Engineering Through Ownership]. - **Collaborative Mindset:** Excitement to work in a high-velocity, outcome-driven environment using rapid prototyping and data-driven prioritization [cite: elt-modernization-blueprint.md]. - **Open Source & Communication:** Excellent written communication and a strong passion for open-source software, developer tooling, and modern internet security [cite: Transforming Engineering Through Ownership]. #### **WHY WORK WITH US** - Our user community loves us and we love them. Come to work each day with a sense of purpose as we bring a more secure internet experience to everyone from our friends and family to the world’s largest organizations. - Become an expert. You’ll get immersed in the prominent technology markets of security and open source software. - We are dedicated to building a diverse and talented team. Work remotely with motivated and supportive team members across the world. - Learn and grow. Take on new challenges with the support of your team, and join our #growth-club to continue personal and professional development. #### **Equal Opportunity Employer** We are committed to fostering an inclusive workplace where everyone can do their best work. We welcome applicants from all backgrounds and make employment decisions based on skills, experience, qualifications, and business needs.