Manager, Secrets Management Platform

What you'll do

• Define and execute the technical strategy and roadmap for Procore’s secrets management and operational tooling platform, spanning secrets, operational ingestion pipelines, asset inventory, and compliance
• Drive the rollout of Procore’s Vault-backed Secrets Management Platform (SMP), leading the strategic transition from legacy static credentials to a Zero Trust, identity-based model built on OIDC and automated dynamic credential frameworks
• Set the architectural direction for end-to-end operational data pipelines — from high-throughput event ingestion to reliable delivery into analytical sinks such as Databricks and Compass for compliance analysis and platform health monitoring
• Build self-service frameworks and standards (secrets provisioning, credential lifecycle, certificate rotation) that engineering teams across Procore can adopt
• Partner with security engineering, SREs, and platform leadership to align investments with reliability, compliance, and incident-response goals
• Evangelize AI in the software development lifecycle — implementing AI-powered guardrails in ingestion pipelines that proactively identify and remediate secret sprawl and compliance drift before it reaches production
• Recruit, mentor, and develop engineers across timezones — fostering a culture of ownership and curiosity
• Drive engineering excellence: SLOs, incident management, system reliability, on-call health, and technical debt
• Collaborate with stakeholders across engineering to align platform investments with broader business objectives

What we're looking for

• 7+ years experience as a Software Engineer, with 2+ years managing teams across varying sizes and timezones
• Hands-on technical depth in backend systems, distributed infrastructure, or platform/developer tooling
• Deep familiarity with the Kubernetes ecosystem and infrastructure-as-code (Terraform/HCL, Helm)
• Experience building or operating secrets management and identity platforms — Vault, External Secrets Operator, OIDC, PKI, least-privilege access, and certificate rotation
• Experience designing operational data pipelines and streaming systems (Kafka), and landing data into analytical sinks such as Databricks and Compass; SQL and database schema design a plus
• Experience evaluating and optimizing tooling strategies — making principled tradeoffs between vendor and custom solutions
• Ability to lead in ambiguity and translate evolving problem spaces into clear strategies and executable roadmaps
• AI-first mindset — experience or genuine interest in leveraging AI tools (Claude, Cursor, LLM APIs, autonomous agents) and building AI-powered guardrails into platform services is a plus