Staff Software Engineer, Certificate Lifecycle Management

Responsibilities

• Architect and develop certificate lifecycle management capabilities spanning discovery, inventory, enrollment, issuance, deployment, renewal, rotation and revocation
• Design scalable backend services and APIs for managing certificates, machine identities and related cryptographic metadata across enterprise environments
• Build certificate discovery and automation workflows across cloud platforms, Kubernetes, web servers, load balancers, databases, network devices and other infrastructure
• Design integrations with public and private certificate authorities and enterprise PKI environments
• Develop secure workflows for certificate enrollment, key handling, trust validation and certificate deployment
• Solve complex engineering challenges involving certificate chains, trust stores, expiration, ownership, policy enforcement and cryptographic compliance
• Design systems that support automated certificate renewal and remediation while minimizing operational disruption
• Provide technical leadership on PKI architecture, machine identity, cryptographic standards and certificate automation
• Partner with Product and Engineering leadership on technical strategy, architecture, requirements and long-term platform direction