Suggested rewrite: Led a cross-functional initiative that improved [business outcome] by [measurable result], demonstrating experience relevant to this role...
Full Stack Engineer
- Salary
- Undisclosed
- Department
- Software Engineering
- Employment
- Full Time
- Experience
- Open level
- Published
- Apply before
- 8 Dec 2026
- Listing views
- 36
- Application actions
- 0
Make your next move.
Prepare your resume, explore your fit, and draft a cover letter for this opportunity.
About this role.
Infisical is the open source security infrastructure platform that engineers use for secrets management, certificates, and privileged access management. We help developers and organizations securely manage billions of secrets every month including application configuration, database credentials, certificates, and more.
We’ve raised ~$60M from Y Combinator, Google, and Elad Gil, and our customers include Hugging Face, OpenRouter, LG, and NVIDIA.
Join us on a mission to make security easier for all developers — starting with secrets management. We’re looking to hire exceptional talent to join us in building the open source security infrastructure stack for the AI era.
About the role
We’re looking for an exceptional Full Stack Engineer to help us build, optimize, and expand the foundation of the platform.
We’ve kept our hiring standards exceptionally high since we expect engineers to tackle a broad range of challenges on a day-to-day basis. Examples of past engineering initiatives include developing strategies for secret rotation and dynamic secrets, a gateway to provide secure access to private resources, protocols like EST and KMIP, integrations for syncing secrets across cloud providers, and entire new product lines such as Infisical PKI and Infisical PAM.
You’ll be working closely with our CTO and the rest of the engineering team to:
Develop and maintain features whilst communicating directly with enterprise customers.
Expand our newer Infisical PKI, Infisical PAM, and Infisical KMS product lines.
Experiment with novel approaches for applying AI to secrets management and more broadly security infrastructure.
Requirements
Deep technical mastery of the JavaScript ecosystem, particularly React.js, Node.js, and TypeScript.
Exceptional attention to detail and eager to learn.
A bias toward action—able to make decisions with incomplete information, iterate quickly, and take calculated risks.
Based in the Americas (US or Canada), Brazil, India, UK, or EU. Must work US hours.
Nice to have
Expertise in Go.
Has some understanding of devops/developer tools.
Previous founder or startup experience.
Previous experience building in open source or developer tools in either a professional or personal setting.
Excellent written and oral communication skills to interact with customers directly.
Team, values & benefits
Our team brings experience from companies like Databricks, AWS, Red Hat, and more. We operate primarily as a remote team, but maintain a strong presence in San Francisco, where we have an office. We also get together in person throughout the year for off-sites, conferences, and team gatherings.
At Infisical, we offer competitive compensation, including both salary and equity options. Additional benefits, such as a lunch stipend and a work setup budget, are available with more details to be found on our careers page.
Annual salary information is not provided for this position. Explore salary ranges for similar roles in our Salary Directory ›
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Pace & Pressure
5/5Autonomy Level
5/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would begin by identifying each secret's owner, lifecycle, rotation interval, and dependent services. I would use short-lived credentials where possible, automate issuance and revocation through provider APIs, and deploy changes with overlap periods so applications can switch credentials without downtime. I would also include audit logs, alerting for failed rotations, and rollback procedures.
I would enforce authorization and validation on the server rather than trusting the client, use typed request and response contracts, and avoid exposing sensitive values in browser state or logs. The React interface would provide clear permission-aware workflows, while the Node.js API would apply least-privilege access controls, audit events, encryption requirements, and robust error handling.
I clarify the intended user outcome, identify security and reliability constraints, and document assumptions with the team. I then choose the smallest reversible implementation that can validate the key risk quickly, measure the result, and iterate. For decisions that affect security boundaries or public APIs, I seek early review before committing to an approach.
I would design a provider abstraction that preserves common workflows without hiding important provider-specific capabilities. Key considerations include credential delegation, rate limits, retries, idempotency, regional behavior, encryption, auditability, and secure handling of provider tokens. Integration tests using isolated accounts and clear observability are essential for diagnosing synchronization failures.
I would first explain the customer impact in plain language, then outline the affected scope, mitigation, and next steps. I would avoid speculation, be transparent about what is known and still under investigation, and provide technical detail appropriate to the audience. After resolution, I would share preventative measures and documentation to build confidence.
Apply now.
Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.
Continue on the employer website
Protect your personal information and never pay to secure an interview or job offer. .
