Lead Product Engineer (Key Management & Confidential Computing)

Overview

As Lead Product Engineer for Key Management & Confidential Computing, you are the technical owner and hands‑on builder of enclaive’s next‑generation vHSM Key and Workload Identity Management Service. You combine deep engineering expertise with pragmatic technical leadership — setting architectural direction, driving engineering quality, and mentoring a small but highly skilled team while actively contributing production code. You shape how secure infrastructure is designed, implemented, and operated in confidential cloud and AI environments. Acting as both a technical authority and product‑mindful engineer, you translate complex security requirements into scalable, maintainable systems that meet real‑world customer needs. You will initially spend the majority of your time building core platform capabilities (approx. 80% hands‑on engineering / 20% leadership), gradually evolving into a broader technical leadership role as the team grows.

Responsibilities & Qualifications

What you'll be doing

• Own the end‑to‑end product lifecycle — architecture, development, release, maintenance, and evolution
• Design and implement secure key management capabilities for confidential cloud and AI workloads
• Extend and maintain a vHSM‑based platform tailored for confidential computing environments
• Collaborate closely with founders, engineers, and product stakeholders to define roadmap and priorities
• Build production‑grade features including:
• Secrets and key lifecycle management
• Access control and identity integration
• Hardware‑backed security and confidential computing integrations
• Secure APIs and automation interfaces
• Drive secure‑by‑design development practices , threat modeling, and code reviews
• Improve reliability, scalability, and performance of the service
• Establish CI/CD pipelines, testing strategies, and release processes
• Support customer deployments, troubleshooting, and technical enablement when needed
• Contribute to architectural decisions around confidential cloud infrastructure and AI security

What you'll add to enclaive

Technical Skills

• Strong hands‑on backend or platform engineering experience
• Must: 8+ years Golang
• Typescript/Javascript, Rust are valuable
• Experience with KMS, HSMs, PKI, or secrets management systems
• Solid understanding of:
• Cloud‑native architectures and Kubernetes environments
• Applied cryptography and key management concepts
• Secure system design and authentication/authorization models
• Experience building production‑grade distributed systems
• Experience with infrastructure‑as‑code, CI/CD, and DevSecOps practices
• Familiarity with confidential computing, trusted execution environments, or hardware security modules is a strong plus, but not a necessity

Mindset & Working Style

• Product ownership mindset — you care about outcomes, not just code
• Comfortable working in a small, fast‑moving startup environment
• Pragmatic decision‑maker who balances innovation with reliability
• Strong communication skills and ability to work closely with intermediate engineers
• Willingness to take responsibility for long‑term maintainability and operational excellence

Technologies we use

• Golang, Typescript (React)
• Docker, Kubernetes, Terraform, Ansible, Helm

Benefits

Why you want to work for enclaive

• We value development . Collaborate with some of the brightest and most captivating minds in the field. As a high‑performance organization, we continuously push our limits and foster a growth mindset. Our commitment to employee development is evident through structured mentorship, LinkedIn Learning programs, and various internal initiatives. Additionally, we support professional growth by reimbursing expenses for relevant conferences, training, and educational endeavors.
• We care about your physical, financial and mental well‑being . Your well‑being matters to us. We offer competitive compensation packages, freedom to select your preferred computer or office equipment within a provided budget, and allowances for commute or internet expenses to facilitate your work environment.
• We are a remote‑work first company . Despite having excellent office facilities, our workforce is widely distributed. Utilizing diverse communication tools, we foster connection across the company. Remote employees are encouraged to participate in team offsites, providing opportunities for face‑to‑face interactions. Diversity and inclusivity are core values we uphold.
• We value diversity and inclusivity . Our hiring practices are free from discrimination based on race, religion, nationality, gender, sexual orientation, age, marital status, veteran status, or disability.