Staff Software Engineer, Certificate Lifecycle Management

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Design and implement capabilities for managing the entire certificate lifecycle, including discovery, inventory, enrollment, issuance, deployment, renewal, rotation, and revocation.

• Create scalable backend services and APIs for handling certificates, machine identities, and cryptographic metadata within enterprise environments.

• Develop workflows for certificate discovery and automation across various cloud platforms, Kubernetes, web servers, load balancers, databases, network devices, and other types of infrastructure.

• Design integrations with both public and private certificate authorities as well as enterprise PKI environments.

• Establish secure workflows for certificate enrollment, key management, trust validation, and certificate deployment.

• Address engineering challenges related to certificate chains, trust stores, expiration, ownership, policy enforcement, and cryptographic compliance.

• Create automated systems for certificate renewal and remediation that minimize operational interruptions.

• Offer technical leadership in PKI architecture, machine identity, cryptographic standards, and certificate automation.

• Collaborate with Product and Engineering leadership to shape technical strategy, architecture, requirements, and the long-term direction of the platform.

• Conduct technical design reviews, mentor engineers, and establish engineering standards for security-sensitive certificate management solutions.

• Assess emerging technologies in PKI, machine identity, and cryptography, providing recommendations for architectural strategies.

• Utilize AI-assisted development tools to enhance technical research, software development, debugging, documentation, and overall engineering efficiency.

⛳️ Requirements

• A minimum of 8 years of professional software engineering experience, with a significant focus on developing backend, infrastructure, or security-centric systems.

• Extensive hands-on experience in certificate lifecycle management, PKI, machine identity security, or a closely related field.

• In-depth knowledge of X.509 certificates, certificate authorities, certificate chains, trust stores, private keys, and public key cryptography.

• Proven experience in certificate lifecycle operations, including discovery, enrollment, issuance, deployment, renewal, rotation, revocation, and expiration management.

• Strong familiarity with ACME, SCEP, EST, OCSP, CRLs, and TLS protocols.

• Proficient backend software engineering experience in languages such as Java, Go, Python, C++, C#, or similar.

• Experience in designing scalable APIs, distributed systems, and automation workflows.

• Proven ability to integrate with enterprise PKI systems, certificate authorities, cloud platforms, or other infrastructure technologies.

• Solid understanding of secure key handling, as well as authentication, authorization, and cryptographic trust principles.

• Experience working within cloud-native and enterprise infrastructure environments.

• Capability to lead architectural discussions and make technical trade-offs regarding security, scalability, reliability, and usability.

• Demonstrated ability to mentor engineers and influence technical direction across teams.

• Willingness to leverage AI-assisted tools for engineering tasks, research, debugging, prototyping, and technical documentation.

• A Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

🏝️ Benefits

• Medical, Dental & Vision coverage (including domestic partnerships).

• Employer-paid Life Insurance & Supplemental Life Insurance for Employees, Spouses, and Children.

• Voluntary Short-Term and Long-Term Disability Insurance.

• 401K options (Roth/Traditional).

• A generous PTO plan that acknowledges your commitment and seniority (including paid Bereavement, Jury Duty, etc.).

• Above-market annual bonuses.