Engineering Manager – Workload Identity & Secrets Platform

Job description

We’re looking for an Engineering Manager to lead Procore’s Secrets Management Platform team within the Developer Acceleration group. You’ll own the strategy and execution for the internal platform powering secrets management, operational data ingestion, asset inventory, and compliance across Procore’s engineering organization — including HashiCorp Vault, the External Secrets Operator, OIDC/PKI-based identity frameworks, and the operational data pipelines that land infrastructure events, discovery data, and security signals. This is a hands-on leadership role where you’ll shape Procore’s secrets and operational-tooling strategy, build a world-class developer experience around internal platform services, and grow a team of 4-6 engineers. At Procore, AI isn’t a specialized tool — it’s a core competency. We expect this leader to be AI-literate, to grow an AI-fluent team, and to build the agentic future of construction into the platform itself. This position reports to a Senior Manager within the Developer Acceleration group and will be a hybrid role based in our Austin,TX office. We're looking for someone to join us immediately. What you'll do: Define and execute the technical strategy and roadmap for Procore’s secrets management and operational tooling platform, spanning secrets, operational ingestion pipelines, asset inventory, and compliance Drive the rollout of Procore’s Vault-backed Secrets Management Platform (SMP), leading the strategic transition from legacy static credentials to a Zero Trust, identity-based model built on OIDC and automated dynamic credential frameworks Set the architectural direction for end-to-end operational data pipelines — from high-throughput event ingestion to reliable delivery into analytical sinks such as Databricks and Compass for compliance analysis and platform health monitoring Build self-service frameworks and standards (secrets provisioning, credential lifecycle, certificate rotation) that engineering teams across Procore can adopt Partner with security engineering, SREs, and platform leadership to align investments with reliability, compliance, and incident-response goals Evangelize AI in the software development lifecycle — implementing AI-powered guardrails in ingestion pipelines that proactively identify and remediate secret sprawl and compliance drift before it reaches production Recruit, mentor, and develop engineers across timezones — fostering a culture of ownership and curiosity Drive engineering excellence: SLOs, incident management, system reliability, on-call health, and technical debt Collaborate with stakeholders across engineering to align platform investments with broader business objectives What we're looking for: 7+ years experience as a Software Engineer, with 2+ years managing teams across varying sizes and timezones Hands-on technical depth in backend systems, distributed infrastructure, or platform/developer tooling Deep familiarity with the Kubernetes ecosystem and infrastructure-as-code (Terraform/HCL, Helm) Experience building or operating secrets management and identity platforms — Vault, External Secrets Operator, OIDC, PKI, least-privilege access, and certificate rotation Experience designing operational data pipelines and streaming systems (Kafka), and landing data into analytical sinks such as Databricks and Compass; SQL and database schema design a plus Experience evaluating and optimizing tooling strategies — making principled tradeoffs between vendor and custom solutions Ability to lead in ambiguity and translate evolving problem spaces into clear strategies and executable roadmaps AI-first mindset — experience or genuine interest in leveraging AI tools (Claude, Cursor, LLM APIs, autonomous agents) and building AI-powered guardrails into platform services is a plus Additional Information Base Pay Range: 168,560.00 - 231,770.00 USD Annual This role may also be eligible for Equity Compensation and/or Bonus Incentive Compensation. Procore is committed to offering competitive, fair, and commensurate compensation. Actual compensation will be based on a candidate’s job-related skills, experience, education or training, and location. This position requires access to technology, software, and data that is controlled or restricted under U.S. law, regulation, executive order, or government contract. For Los Angeles County (unincorporated) Candidates: Procore will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable federal, state, and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. A criminal history may have a direct, adverse, and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. appropriately managing, accessing, and handling confidential information including proprietary and trade secret information, as well as accessing Procore's information technology systems and platforms; 2. interacting with and occasionally having unsupervised contact with internal/external customers, stakeholders, and/or colleagues; and 3. exercising sound judgment.