28 days ago
Base Salary
$130k - $169k/yr
Responsibilities
- Own and mature PKI and cryptography infrastructure across enterprise and cloud environments.
- Define standards, guardrails, and reference patterns for certificate issuance, renewal, revocation, and trust management.
- Support certificate-based authentication for network, device, and code-authentication use cases.
- Build automation and operational tooling for reliability, visibility, and lifecycle management.
- Partner with engineering and infrastructure teams on secure system design and implementation.
- Contribute to security architecture and design reviews across cloud, infrastructure, platform, PKI, and cryptography initiatives.
- Troubleshoot production PKI and cryptography issues, perform root cause analysis, and drive durable remediation.
- Mentor security engineers and partner with audit and GRC teams on cryptography- and identity-related controls.
Requirements
- 5+ years of security engineering experience, including hands-on work with PKI, cryptography infrastructure, or closely related security engineering domains.
- Strong experience managing production PKI environments, including CA hierarchies, certificate lifecycles, certificate-based authentication, and troubleshooting trust, issuance, and renewal failures at scale.
- Experience with NAC-related certificate authentication and technologies such as ClearPass, NDES, SCEP, or similar systems.
- Experience contributing to security architecture reviews and evaluating security controls and secure design decisions.
- Familiarity with SAML, OAuth 2.0, OIDC, and LDAP as they relate to certificate-based authentication and PKI integration.
- Proficiency in Python, Go, or similar languages for automation, tooling, and workflow improvement.
- Ability to make sound security design decisions and collaborate directly with engineers on practical implementations.
- Strong communication and cross-functional collaboration skills.
- Preferred experience with security architecture documentation, design reviews, security control frameworks, SOC 2, ISO 27001, NIST, or regulated environments.
- CISSP or CCSP certification is preferred.
Benefits
- Bonus and RSU eligibility.
- Medical, dental, vision, prescription drug coverage, Health Savings Account with employer funding, and Flexible Spending Accounts.
- Company-paid basic life/AD&D insurance and short- and long-term disability coverage, plus voluntary benefit offerings.
- Employee Assistance Program and business travel accident insurance.
- 401(k) savings plan with discretionary company match and access to a financial advisor.
- Vacation, paid holidays, floating holiday, and sick days.
- Employee discounts, free weekly catered lunch, office snacks and beverages, and free swag giveaways.
- Dog-friendly offices and free gym access at select locations, plus holiday parties, pop-ups, and other company events.
