Senior Software Engineer, Proactive Security - Platform
DoorDash USA · United States - Remote
About this role
**Senior Software Engineer, Proactive Security - Platform (DoorDash)** **About the Team** DoorDash is building a scalable, reliable delivery network for consumers, merchants, and Dashers. Security Engineering is critical to the business, and DoorDash Security aims to be one of the world’s most admired security engineering teams—helping secure and maintain a 24/7, no-downtime global infrastructure. **About the Role** The Proactive Security Engineering team is looking for a **Senior Software Engineer, Proactive Security - Platform** to build “paved paths” that help engineers access infrastructure, manage secrets, and authenticate services. You’ll be part of a global Security Engineering Platform team responsible for building and operating **tier-0 security services** for: - Access management - Secret storage - Identity This includes in-house platforms such as **Access Platform**, **Teleport**, and **HashiCorp Vault**. The goal is to make the secure path the easiest path—**self-service, well documented, and integrated into the tools engineers already use**. **Location** **US remote**, reporting to the Manager of the Proactive Security Engineering Platform team. **You’ll be excited because you will…** - Design, build, and operate paved paths for privileged access, secrets management, and identity on top of DoorDash’s access and secret storage platforms. - Build self-service tooling, SDKs, Terraform modules, and integrations to enable **just-in-time access**, **short-lived credentials**, and **dynamic secrets** without ticketing. - Design and operate highly available distributed systems (replication, consistency, consensus) that underpin tier-0 services. - Drive migrations off long-lived credentials and standing access—measuring success by exposure eliminated at the platform layer. - Partner with Core Infrastructure, Compute, Data, and product engineering teams to integrate paved paths into **Kubernetes, CI/CD, AWS, and GCP** across DoorDash, Wolt, and Deliveroo. - Participate in a follow-the-sun on-call rotation for tier-0 security services; improve Operational Excellence via monitoring, runbooks, incident response, and root cause analysis. - Enable secure adoption of AI tooling and agentic workflows through access control and secrets brokering for agents. **We’re excited about you because you have…** - **6+ years** experience as a Software, Infrastructure, or Security Platform Engineer at an internet-scale organization. - A Bachelor’s degree in Computer Science/Security Engineering (or related) or equivalent experience. - Strong software engineering skills in **Go** (or Kotlin, Java, Python), building production services and developer tooling. - Hands-on experience building/operating access management and secret storage systems (PAM, secrets management, key management). **Teleport** or **HashiCorp Vault** experience is a plus. - Solid distributed systems knowledge (replication, consistency, consensus such as **Raft**/**Paxos**). - Working knowledge of identity/auth standards: **OIDC, SAML, mTLS**, and workload identity (e.g., **SPIFFE**, **AWS IAM Roles**, **GCP Workload Identity**). - Experience with **Kubernetes, Terraform**, and **AWS and/or GCP IAM**. - Track record building internal platforms/paved paths adopted by other engineers with strong developer experience focus. - Experience running highly available, no-downtime services with mature on-call practices. - Clear verbal and written communication skills; ability to drive ado
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.