Smallstep is an internationally distributed, remote-first company. We work reasonable, flexible hours and utilize technology to accomplish goals asynchronously. We look for folks who are thoughtful, can break down problems, and often work independently. You are trusted to work on your own and to ask for help when blocked. At Smallstep you get the benefit of working with a tight-knit team across many areas and contribute directly to the success of the organization.

Security is a core responsibility for all employees at Smallstep. All roles are expected to strictly adhere to our security policies, procedures, and best practices to protect company assets, customer data, and systems. All employees must remain vigilant, report potential security concerns, and participate in ongoing security training to ensure compliance with industry standards.

We are a nimble deep-tech startup of seasoned experts. We’re looking for a Senior Software Engineer to help build and maintain cross-platform software that manages hardware-bound device identity and configures clients to securely connect to networks using hardware-backed credentials. These clients include systems such as Wi-Fi networks, wired networks, VPNs, financial dashboards, IP-restricted resources, and GDPR-scoped PII databases. You'll work across Linux, macOS, and Windows, and help extend support to ChromeOS, iOS, and Android.

Responsibilities

Designing, developing, and maintaining Smallstep’s cross-platform software across mobile and desktop OSes, including Linux and ChromeOS.
Creating and maintaining re-usable CI/CD workflows for software deployment, testing, and other automation using GitHub Actions

Experience With …

Developing and maintaining complex, network applications in Go
Securing network applications with cryptography
Public and private PKI
Developing and maintaining applications for macOS, Windows, and Linux
Developing and maintaining software that integrates with TPMs, HSMs, etc.
Bonus points for experience with YubiKeys, Nitrokeys, etc. (other hardware security keys)

Nice to Have

Comfortable with Kubernetes tooling such as kustomize and helm
Experience creating, maintaining, and operating infrastructure within Google Cloud Platform (GCP)

Technologies

Go, gRPC, GitHub Actions, Git, macOS, Windows, Linux, YubiKey, FIDO2, TPMs (across operating systems), PKCS11, PKI, X509, SSH, OAuth 2.0, JWT

We believe in action-based empathy. We actively work to create an environment where everyone feels welcome and valued as teammates and contributors. We know a diverse team is essential to create a vibrant and inclusive culture that fosters a true sense of belonging. By embracing the unique talents and perspectives of our entire team, we approach challenges in ways that a monocultural team simply cannot.

We’re committed to building a self-aware group that is collaborative and results- driven, representing a variety of skills, backgrounds, and lived experiences. We believe everyone deserves a competitive salary, industry leading benefits, the ability to share in the company’s success, and the psychological safety to be their truest selves at work.

Smallstep is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We encourage all those interested to apply.