Overview
Lead the design and development of Bitwarden's next-generation Privileged Access Management (PAM) platform, owning gateway services, terminal access protocols, and auditing/enforcement as a T-shaped engineer on a True Ownership model.
What you'll do
- Design, develop, test, deploy, and operate secure, performant gateway controls, audited terminal logins, and session recording mechanics for the PAM product line.
- Maintain strict service boundaries and design resilient APIs so the PAM platform operates as an independent, decoupled tenant on core platform infrastructure.
- Partner in a co-located, cross-functional Embedded Trio (Product, Design, Engineering) to design and validate technical solutions before code implementation.
- Build and maintain automated test suites, integration harnesses, and CI/CD pipelines for your team's services.
- Own the operational health, performance, and reliability telemetry of your services in production, participating in sustainable on-call rotations and postmortem analyses.
- Build and maintain internal architecture specifications, API contracts, and external open-source developer documentation.
What you'll need
- 8+ years as a Lead Software Engineer with team lead experience, paired with AI-assisted development practices.
- Experience leading a team's technical direction, mentoring senior engineers, and being accountable for outcomes you did not implement yourself.
- Experience with JEST or any other unit testing framework.
- Strong proficiency and experience in AI-led development in C# / .NET, Rust, or TypeScript.
- Practical experience designing or implementing secure gateway architectures, reverse proxies, and session proxying (SSH, RDP, or HTTPS).
- Understanding of Identity and Access Management, key-rotation protocols, and real-time audit logging systems.
- Practical experience with containerized environments (Docker/Kubernetes), automated test frameworks (unit, integration, and end-to-end), and SRE/observability tools (APM, alerting, telemetry dashboards).
- Familiarity with zero-trust and zero-knowledge security architectures, encryption standards, and threat-modeling methodologies.
- Excellent problem-solving skills, valuing written, clear documentation and using data to make technical decisions.
- A highly collaborative and adaptable mindset, comfortable in rapid, outcome-driven feedback loops.
Nice to have
- Excitement and enthusiasm for open source, developer advocacy, and building a more secure internet.
Details
Read the full description and apply on the company’s own careers page.