Senior Software Engineer, Proactive Security - Platform

DoorDash is hiring a Senior Software Engineer for its Proactive Security Engineering Platform team. The role builds and operates self-service platform tools and tier-0 security services for privileged access, secrets management, and identity, while helping engineering teams adopt secure infrastructure practices.

Responsibilities:

• Design, build and operate paved paths for privileged access, secrets management and identity on top of our access management and secret storage platforms
• Build self-service tooling, SDKs, Terraform modules and integrations that let engineering teams adopt just-in-time access, short-lived credentials and dynamic secrets without filing a ticket
• Design and operate highly available distributed systems, including replication, consistency and consensus, that underpin tier-0 services
• Drive migrations off long-lived credentials and standing access. Success is measured in classes of exposure eliminated at the platform layer, not in shipping code for its own sake
• Partner with Core Infrastructure, Compute, Data and product engineering teams to integrate paved paths into Kubernetes, CI/CD, and AWS and GCP environments across DoorDash, Wolt and Deliveroo
• Participate in a follow-the-sun on-call rotation for tier-0 security services and raise the bar on Operational Excellence through monitoring, runbooks, incident response and root cause analysis
• Help enable the secure adoption of AI tooling and agentic workflows through access control and secrets brokering for agents

Requirements:

• 6+ years of experience as a Software, Infrastructure or Security Platform Engineer at an internet scale organization
• Bachelor's degree in Computer Science, Security Engineering, a related field or equivalent work experience
• Strong software engineering skills in Go (or Kotlin, Java, Python), building production services and developer tooling
• Hands-on experience building or operating access management and secret storage systems, such as PAM, secrets management or key management platforms
• Solid understanding of distributed systems, including replication, consistency and distributed consensus (e.g. Raft, Paxos)
• Working knowledge of identity and authentication standards such as OIDC, SAML, mTLS and workload identity (e.g. SPIFFE, AWS IAM Roles, GCP Workload Identity)
• Experience with Kubernetes, Terraform or other infrastructure as code, and AWS and/or GCP IAM
• Track record of building internal platforms or paved paths that other engineers chose to adopt, with a strong focus on developer experience
• Experience running highly available, no-downtime services with mature on-call practices
• Clear verbal and written communication skills, and the ability to drive adoption across engineering teams
• Experience with Teleport or HashiCorp Vault is a plus