Software Engineer

Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, naturally like to think big and bold, and are energized by the fast-paced environment of a true industry disruptor, you’ll find your place here.  We value winning together—while learning, having fun, and making a profound difference for the dreamers and builders in the world. 

We are seeking a Staff Software Engineer (IC5) to join our Security Products team, spanning Identity and Access Management (IAM), Key Management Systems (KMS), Cloud Security Posture Management (CSPM), and Identity Security Posture Management (ISPM). Security Products is the trust layer for DigitalOcean's platform — the systems you will influence protect every customer workload, every cryptographic key, every identity assertion, and every access decision made across the platform, including our rapidly growing AI inference stack.

This is not a role scoped to a single product or team. As a Staff Engineer in Security Products, you will set the technical direction across the entire security products organization, resolve architectural conflicts that no individual team can resolve alone, and build the connective tissue between identity, key management, and posture systems that makes DigitalOcean's security platform coherent rather than fragmented. You will be the primary technical partner to the Sr. Director of Security Products in shaping multi-year strategy, and you will be the engineering voice representing security architecture in DigitalOcean's most consequential platform decisions.If you are a seasoned security engineer with a track record of technical leadership that spans organizational boundaries — and who wants to define what a modern cloud security platform looks like for the AI-native era — this is the role for you.

What You'll Do

• Define Security Products Architecture: Own the multi-year technical strategy across IAM, KMS, CSPM, and ISPM — ensuring these systems compose coherently rather than operating as isolated products. Identify the seams where identity, key management, and posture signal must integrate, and drive the architectural decisions that close them.
• Lead the Agent Identity & Trust Architecture: Define how DigitalOcean's platform establishes, validates, and governs identity for non-human workloads — including agentic AI systems, inference pipelines, and service-to-service trust. This spans SPIFFE/SPIRE-style workload identity, short-lived credential issuance, scoped JWT attestation, and the policy engine that governs what agents are permitted to do and access.
• : Serve as the primary technical arbitrator for decisions that span more than one Security Products team — including how key material is bound to identity assertions, how CSPM findings feed into access policy enforcement, how ISPM risk signals propagate into real-time authorization decisions, and how audit evidence flows across all four domains in a compliance-coherent way.