Senior Security Engineer, PKI & Secrets
Core
Design, operate, and scale cryptographic infrastructure (PKI, secrets management, HSMs, key management) to secure CoreWeave's global GPU fleet and AI workloads.
Role type
Senior Security Engineer (PKI & Secrets)
Builds
PKI hierarchies, secrets management platforms, HSM infrastructure, key management systems, and code signing pipelines.
Domain
Cloud Infrastructure / Cryptography / AI Compute
Deliverable
production ML models | infrastructure
Required skills
PKI concepts (CA hierarchies, certificate lifecycle), secrets management (HashiCorp Vault), HSM operations (PKCS#11, key ceremonies), applied cryptography (symmetric/asymmetric, TLS, envelope encryption), Go/Python, Kubernetes (cert-manager, External Secrets Operator), cross-functional leadership.
Preferred skills
Hyperscaler PKI/HSM experience, code signing workflows (Authenticode, Cosign/Sigstore), KMS design (multi-tenant isolation), hardware attestation (TPM, SPIFFE/SPIRE), post-quantum cryptography.
Technologies
HashiCorp Vault, HSMs, Kubernetes, cert-manager, External Secrets Operator, Go, Python, PKCS#11, TPM, SPIFFE/SPIRE.
Responsibilities
Design and operate PKI infrastructure including CA hierarchies and trust distribution; manage secrets management platforms and lifecycle governance; operate and scale HSM infrastructure; design key management and encryption solutions; deliver PKI-based solutions for workload identity and mutual TLS; maintain code signing infrastructure; enforce cryptographic best practices.
Seniority
Senior, hands-on IC
