Product Engineer - Vault

Workos
Remote
Remote

Job Description

About WorkOS 🚀

WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations.

We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Vercel, and Plaid.

As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control—helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products.

About the role đź’­

The Vault team is responsible for building and scaling WorkOS Vault, our developer-friendly encryption key management and secret storage product. Vault enables applications to encrypt, segment, and optionally store highly sensitive data—tokens, passwords, certificates, PII, API keys, files—backed by enterprise-grade encryption and key management infrastructure. The vision for Vault is to make cryptography simple and fast, and the product currently serves tens of millions of encryption requests each day.

On this team you’ll work on building reliable, high-throughput systems, defining new abstractions for developer-friendly encryption, and crafting APIs that both scale and stay simple. We’re looking for Engineers to join this team that are motivated by solving deep security and infrastructure problems, owning high-impact systems end-to-end, and working closely with customers to deliver robust products, 

Responsibilities ✔️

  • Architect and implement systems for real-time encryption, secure storage, key-rotation, and data revocation across multi-tenant applications
  • Build deep domain expertise around encryption key management (EKM), envelope encryption, BYOK (Bring Your Own Key), and context-based key isolation
  • Work closely with enterprise customers to understand their compliance, key control, and security requirements—and translate that into features (e.g., key segmentation, audit logs, cryptographic deletion)
  • Collaborate cross-functionally with other product teams (e.g., AuthKit, Radar), solutions engineering, and GTM to ensure Vault integrates seamlessly into the broader platform
  • On greenfield opportunities: explore new features such as field-level encryption, e2e encryption, broader HSM integrations, client-side SDK enhancements
  • Help recruit, mentor, and grow the engineering team around Vault’s roadmap

Qualifications 🌟

  • 5+ years of industry software development experience
  • Experience working on small teams in fast-paced environments
  • Background in building systems that solve for security, encryption, storage, multi-tenant data isolation, or large-scale data platforms
  • Intellectually curious, independently driven, and passionate about great products
  • A growth mindset, high emotional intelligence, and strong communication skills
  • Bonus: Experience with our stack of TypeScript, React, and Postgres
  • Bonus: Experience in B2B SaaS, developer tools, or a related industry

Benefits (US Only) đź’–

At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.

Benefits include:

  • Competitive pay
  • Substantial equity grants
  • Healthcare insurance (Medical, Dental and Vision) for you and your family
  • 401k matching
  • Wellness and fitness monthly allowances
  • PTO + paid holidays + unlimited sick leave
  • Autonomy and flexibility with remote work

Please inquire directly with our recruiting team for benefits available to those working outside the US.

Equal Opportunity Employer

WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Skills & Requirements

Technical Skills

EncryptionKey managementEnvelope encryptionByokContext-based key isolationField-level encryptionE2e encryptionHsm integrationsClient-side sdk enhancementsCommunicationCollaborationProblem-solvingArchitectureImplementationDomain expertiseCustomer understandingFeature translationEncryptionKey managementSecurityInfrastructure

Soft Skills

CommunicationProblem-solvingCollaboration

Domain Knowledge

SecurityInfrastructure

Salary

$175,000 - $275,000

year

Employment Type

FULL TIME

Level

senior

Posted

1/14/2026

Continue to Ashby

You will be redirected to the job posting on Ashby.

Sign in and we'll score your resume against this role.

Find Similar Jobs

Browse roles in the same category, level, and remote setup.