Software Engineer (Privileged Access Management - PAM)

Software Engineer (Privileged Access Management - PAM)

at Bitwarden in Engineering

Remote, U.S.

About Bitwarden

Bitwarden is the trusted identity security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere. Bitwarden makes it easy for all users to extend robust security across their devices with password management, secrets management, and passwordless and passkey innovations. The company is headquartered in Santa Barbara, California. Learn more at bitwarden.com.

The Role

As a Senior Software Engineer on Bitwarden’s Privileged Access Management (PAM) team, you will lead the design and development of our next-generation privileged access platform. You'll own critical gateway services, terminal access protocols, and auditing/enforcement at the intersection of security, scalability, and user experience.

In alignment with our modern True Ownership model, our engineers are "T-shaped" professionals who own their services end-to-end—from initial design and secure development to automated testing, deployment, and operational health in production. This role offers unique opportunities to build secure-by-default patterns and make significant contributions to our open-source security ecosystem.

This is an all-remote team and we’re looking for someone located in the US. We do not offer visa sponsorship at this time.

RESPONSIBILITIES

• End-to-End Delivery: Support Bitwarden goals by designing, developing, testing, deploying, and operating secure, performant gateway controls, audited terminal logins, and session recording mechanics for our PAM product line.
• Decoupled Architecture: Maintain strict service boundaries and design resilient APIs that allow the PAM platform to operate as an independent, decoupled tenant on our core platform infrastructure.
• Upstream Collaboration: Partner closely in a co-located, cross-functional "Embedded Trio" (Product, Design, and Engineering) to rapidly design and validate technical solutions prior to code implementation.
• Automated Quality: Eliminate manual testing barriers by building and maintaining robust automated test suites, integration harnesses, and CI/CD pipelines for your team's services.
• Operational Stewardship: Own the operational health, performance, and reliability telemetry of your services in production, proactively participating in sustainable on-call rotations and postmortem analyses.
• Documentation: Build and maintain high-quality internal architecture specifications, API contracts, and external open-source developer documentation.

WHAT YOU BRING TO BITWARDEN

• Overall Experience: 1-4 years as a Software Engineer
• Technical Stack:Strong proficiency and experience in AI-Led Development in C# / .NET, Rust, or TypeScript.
• Security Domain Expertise: Practical experience designing or implementing secure gateway architectures, reverse proxies, and session proxying (SSH, RDP, or HTTPS).
• Identity & Auditing: Understanding of Identity and Access Management, key-rotation protocols, and real-time audit logging systems.
• T-Shaped Engineering Mindset: Practical experience with containerized environments (Docker/Kubernetes), automated test frameworks (unit, integration, and end-to-end), and SRE/observability tools (APM, alerting, and telemetry dashboards).
• Secure Coding: Familiarity with zero-trust and zero-knowledge security architectures, encryption standards, and threat-modeling methodologies.
• Collaborative Spirit: A highly collaborative and adaptable mindset, excited to work in rapid, outcome-driven feedback loops.
• Open Source Passion: Excitement and enthusiasm for open source, developer advocacy, and building a more secure internet.
• Problem-Solving: Excellent problem-solving skills—valuing written, clear documentation and using data to make technical decisions.

WHAT TO EXPECT IN THE INTERVIEW PROCESS

• Meeting with our Recruiting team
• Interview with Engineering Manager
• Interview/s with team members
• Reference calls

A FEW REASONS TO WORK WITH US

• Our user community loves us and we love them. Come to work each day with a sense of purpose as we bring a more secure internet experience to everyone from our friends and family to the world’s largest organizations.
• Become an expert. You’ll get immersed in the prominent technology markets of security and open source software.
• We are dedicated to building a diverse and talented team. Work remotely with motivated and supportive team members across the world.
• Learn and grow. Take on new challenges with the support of your team, and join our #growth-club to continue personal and professional development.