Software Engineer (Secrets Manager & AI Identity)

Bitwarden is the trusted identity security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere. Bitwarden makes it easy for all users to extend robust security across their devices with password management, secrets management, and passwordless and passkey innovations. The company is headquartered in Santa Barbara, California. Learn more at bitwarden.com.

As we establish our India Engineering Center of Excellence (COE), we are looking for an experienced Software Engineers for our teams. As a Senior Software Engineer on Bitwarden’s Secrets Manager team, you will lead the development of our dedicated secrets engine, machine-to-machine (M2M) authorization protocols, and developer-focused CLI/SDKs [cite: bitwarden_teams_charter_strategy.md]. Looking ahead, you will play a pivotal role in designing and building the core infrastructure that extends Secrets Manager into our next-generation AI Identity and Access management platform—securing ciphers, credentials, and API keys against the unique custody risks of autonomous AI agents and headless workloads.

In alignment with our modern True Ownership model, our engineers are "T-shaped" professionals who own their services end-to-end—from initial design and secure development to automated testing, deployment, and operational health in production [cite: Transforming Engineering Through Ownership]. You will collaborate closely in a synchronous "Embedded Trio" (Product, Design, and Engineering) to design and ship elegant, secure, and resilient code [cite: elt-modernization-blueprint.md].

• →Platform & Feature Development: Design, build, and maintain high-performance APIs, SDKs, and CLIs for Secrets Manager and our future AI Identity and Access security frameworks [cite: bitwarden_teams_charter_strategy.md].
• →Machine & AI Identity Custody: Implement secure, zero-knowledge machine authentication, scoped access tokens, and runtime secrets injection gateways that protect credentials from being exposed to parent AI models or local execution environments.
• →Decoupled Architecture: Work within our Decoupled Platform Architecture to ensure Secrets Manager operates as a highly scalable, independent tenant using its own dedicated data stores and asynchronous event-driven message networks [cite: elt-modernization-blueprint.md].
• →End-to-End Ownership: Own the automated testing, deployment pipelines, and production SRE health of your team's services, participating in on-call rotations and postmortem analyses to drive continuous operational improvement [cite: elt-modernization-blueprint.md].
• →Developer Usability: Build usable, highly developer-friendly API endpoints, integration libraries, and comprehensive technical documentation to lower the friction of secrets enrollment and machine onboarding [cite: bitwarden_teams_charter_strategy.md].
• →Security & Compliance: Proactively threat-model new services, remediate security vulnerabilities, and ensure our secrets engine maintains our strict, audited compliance standards [cite: elt-modernization-blueprint.md].

• Overall Experience: 3-6 years in Software Engineering
• Technical Stack: Strong proficiency and experience in AI-Led Development in Rust, C# / .NET, or TypeScript (our core Secrets Manager SDK is built in Rust).
• Identity & Secrets Management: Practical experience designing or integrating machine identity platforms, vaulting services, OAuth/OIDC, or token-based authorization structures (e.g., JWT, access tokens, API keys).
• AI/Agent Security Interest: Curiosity or experience with the security implications of AI agent architectures, large language model (LLM) memory isolation, or sandboxed execution environments.
• T-Shaped Engineering Mindset: Experience writing robust automated integration tests, maintaining containerized environments (Docker/Kubernetes), and using modern APM and SRE logging tools (e.g., Azure Monitor, Grafana) to monitor services in production [cite: Transforming Engineering Through Ownership].
• Cryptographic Foundations: Solid grasp of symmetric/asymmetric encryption, zero-knowledge protocols, and OS-level secure storage APIs [cite: Transforming Engineering Through Ownership].
• Collaborative Mindset: Excitement to work in a high-velocity, outcome-driven environment using rapid prototyping and data-driven prioritization [cite: elt-modernization-blueprint.md].
• Open Source & Communication: Excellent written communication and a strong passion for open-source software, developer tooling, and modern internet security [cite: Transforming Engineering Through Ownership].

We are committed to fostering an inclusive workplace where everyone can do their best work. We welcome applicants from all backgrounds and make employment decisions based on skills, experience, qualifications, and business needs.