Principal Engineer – Cryptography

This is a fully remote position, open to applicants in California, +7 more states.

📋 Description

• Engage with IETF standards bodies and TLS/SSL working groups on behalf of GoDaddy

• Evaluate CA infrastructure to uncover architectural deficiencies, security risks, and performance issues

• Establish requirements for certificate issuance workflows, HSM integrations, and cryptographic key management systems

• Outline automated compliance testing frameworks, CT log integration, OCSP responder infrastructure, and revocation systems

• Create automation scripts for compliance evaluation and verification

• Determine SLIs/SLOs for certificate issuance speed, system uptime, and compliance metrics

• Document infrastructure-as-code prerequisites for CA deployment, disaster recovery, and high-availability setups

• Investigate requirements for post-quantum algorithms and hybrid certificate chains

• Formulate migration plans from outdated cryptographic systems to advanced algorithms

• Generate technical specifications for new standards, including ACME extensions, Certificate Transparency v2, and delegated credentials

• Collaborate with cryptography researchers on algorithm efficiency, key sizes, and implementation trade-offs

• Develop the roadmap for CA platform functionalities, certificate lifecycle automation, API development, and integration frameworks

• Define scalable APIs and automation tools for certificate issuance, renewal, and revocation processes

• Document self-service platforms and tools aimed at minimizing manual certificate operations

• Create automated testing and continuous compliance monitoring with remediation features

• Work alongside security engineering teams on threat modeling, secure coding practices, and vulnerability management

• Lead architecture reviews and technical design discussions with cross-functional engineering teams

• Set standards for technical documentation and compliance engineering

• Mentor engineers on PKI, cryptographic implementations, and compliance engineering methodologies

• Report directly to GoDaddy’s Vice President Engineering Partners

⛳️ Requirements

• Over 8 years of practical engineering experience in PKI systems, applied cryptography, or security infrastructure

• Demonstrated technical leadership capabilities

• Strong technical proficiency in Go, Python, Java, or C++

• In-depth knowledge of PKI architecture, including X.509 certificate formats, ASN.1 encoding, certificate chain validation, HSM operations, and cryptographic primitives

• Experience in translating CA/Browser Forum Baseline Requirements into technical documentation

• Familiarity with distributed systems, API design, database architecture, and cloud infrastructure (AWS/GCP/Azure)

• Capability to define requirements for PKI protocols such as ACME, Certificate Transparency, and OCSP/CRL

• Ability to convert compliance requirements into technical documentation, engineering specifications, and test automation scripts

• Advanced degree in Computer Science, Cryptography, Mathematics, or Electrical Engineering

• Experience in researching and assessing post-quantum cryptographic algorithms

• Relevant security certifications such as CISSP, CEH, or specialized cryptography credentials

• Knowledge of security audit processes, including WebTrust for CAs and ETSI EN 319 411

• Contributions to PKI-related initiatives such as Boulder, cert-manager, OpenSSL, or BoringSSL

• Experience in defining requirements for high-availability systems, HSMs, and secure key ceremony protocols

• Understanding of DevSecOps, CI/CD pipelines, and infrastructure automation with tools like Terraform, Kubernetes, or Ansible

• Familiarity with OpenSSL, BoringSSL, and PKCS#11

• Experience in developing test automation scripts for compliance validation

🏝️ Benefits

• Competitive salary

• Generous paid time off

• Parental and wellness leave

• Comprehensive healthcare coverage

• Retirement savings program

• Medical, dental, and vision insurance

• 401(k) retirement plan

• Paid sick leave

• Paid flexible time off

• Paid parental leave

• Life insurance

• Short- and long-term disability insurance

• AD&D insurance

• Mental health or EAP programs

• Options for remote or hybrid work

• Paid holidays

• Paid wellness days

• Tuition assistance

• Adoption, surrogacy, and fertility benefits

• Dependent daycare and backup care assistance

• Employee stock purchase plan

• Financial education and advisory services

• Potential for corporate bonuses and/or equity awards