Staff Software Engineer, Certificate Lifecycle Management
Core
Architect and build certificate lifecycle management capabilities for discovering, issuing, deploying, monitoring, renewing, rotating, and revoking digital certificates across enterprise environments.
Role type
Staff Software Engineer (PKI & Machine Identity)
Builds
Scalable backend services, APIs, and automation workflows for certificate management and cryptographic trust.
Domain
Cybersecurity, PKI, Machine Identity, Cloud Infrastructure
Deliverable
production ML models | product features | infrastructure
Required skills
Certificate lifecycle management, PKI protocols (ACME, SCEP, EST, OCSP, CRLs), X.509 certificates, Cryptography, Backend engineering (Java/Go/Python/C++), Distributed systems, Cloud-native infrastructure, Technical leadership, Mentoring
Preferred skills
Commercial PKI platform experience, Kubernetes automation, Hardware security modules, Secrets management, Non-human identity, PAM
Technologies
Kubernetes, CI/CD pipelines, Cloud platforms, Enterprise PKI systems, AI-assisted development tools
Responsibilities
Architect certificate lifecycle capabilities, Design scalable backend services and APIs, Build automation workflows for certificate discovery and deployment, Design integrations with certificate authorities, Provide technical leadership and mentor engineers, Evaluate emerging PKI and cryptographic technologies
Seniority
Staff, hands-on IC with strategic influence
