Software Engineer (Secrets Manager & AI Identity)

Bitwarden is the trusted identity security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere. Bitwarden makes it easy for all users to extend robust security across their devices with password management, secrets management, and passwordless and passkey innovations. The company is headquartered in Santa Barbara, California. Learn more at bitwarden.com.

The Role

As we establish our India Engineering Center of Excellence (COE), we are looking for an experienced Software Engineers for our teams. As a Senior Software Engineer on Bitwarden’s Secrets Manager team, you will lead the development of our dedicated secrets engine, machine-to-machine (M2M) authorization protocols, and developer-focused CLI/SDKs. Looking ahead, you will play a pivotal role in designing and building the core infrastructure that extends Secrets Manager into our next-generation AI Identity and Access management platform—securing ciphers, credentials, and API keys against the unique custody risks of autonomous AI agents and headless workloads.

In alignment with our modern True Ownership model, our engineers are "T-shaped" professionals who own their services end-to-end—from initial design and secure development to automated testing, deployment, and operational health in production. You will collaborate closely in a synchronous "Embedded Trio" (Product, Design, and Engineering) to design and ship elegant, secure, and resilient code.

What You Will Do

• Platform & Feature Development: Design, build, and maintain high-performance APIs, SDKs, and CLIs for Secrets Manager and our future AI Identity and Access security frameworks.
• Machine & AI Identity Custody: Implement secure, zero-knowledge machine authentication, scoped access tokens, and runtime secrets injection gateways that protect credentials from being exposed to parent AI models or local execution environments.
• Decoupled Architecture: Work within our Decoupled Platform Architecture to ensure Secrets Manager operates as a highly scalable, independent tenant using its own dedicated data stores and asynchronous event-driven message networks.
• End-to-End Ownership: Own the automated testing, deployment pipelines, and production SRE health of your team's services, participating in on-call rotations and postmortem analyses to drive continuous operational improvement.
• Developer Usability: Build usable, highly developer-friendly API endpoints, integration libraries, and comprehensive technical documentation to lower the friction of secrets enrollment and machine onboarding.
• Security & Compliance: Proactively threat-model new services, remediate security vulnerabilities, and ensure our secrets engine maintains our strict, audited compliance standards.

What You Bring

• Overall Experience: 3-6 years in Software Engineering.
• Technical Stack: Strong proficiency and experience in AI-Led Development in C# / .NET/ Rust, or TypeScript (our core Secrets Manager SDK is built in Rust).
• Identity & Secrets Management: Practical experience designing or integrating machine identity platforms, vaulting services, OAuth/OIDC, or token-based authorization structures (e.g., JWT, access tokens, API keys).
• AI/Agent Security Interest: Curiosity or experience with the security implications of AI agent architectures, large language model (LLM) memory isolation, or sandboxed execution environments.
• T-Shaped Engineering Mindset: Experience writing robust automated integration tests, maintaining containerized environments (Docker/Kubernetes), and using modern APM and SRE logging tools.