Software Engineering Architect, PKI & Trust Services
InformaticaBase Salary
$218k - $365k/yr
Responsibilities
- Own the target architecture and multi-year strategy for certificate lifecycle, trust distribution, and cryptographic identity across workloads and AI agents.
- Lead execution of trust-services architecture through production across multiple engineering teams.
- Architect highly available, globally scalable trust infrastructure with measurable SLOs and automated fleet-wide certificate renewal.
- Drive automation-first, cost-effective architecture, including zero-touch lifecycle operations, zero-downtime migrations, and build-versus-buy decisions.
- Establish architectural and security standards for trust-platform interfaces and guide teams through complex design trade-offs.
- Prototype, write critical-path code, and validate architecture in live systems.
- Present architecture and investment proposals to senior leadership, mentor engineering leads, and scale technical expertise across the organization.
Requirements
- 12+ years of experience designing and operating large-scale distributed systems or infrastructure services.
- Demonstrated success driving multi-team technical strategy into production.
- Deep expertise in distributed-systems architecture, reliability, and performance at scale.
- Hands-on experience operating mission-critical, highly available services on AWS or GCP, including Kubernetes and service mesh.
- Security experience in identity and authorization, applied cryptography, or infrastructure security.
- Working knowledge of PKI, X.509 certificates, mTLS, and key management.
- Proven ability to align cross-organizational initiatives without direct authority.
- Strong communication skills, including authoring adopted architecture proposals and presenting to engineers and executives.
- Experience using AI development tools such as Claude Code, GitHub Copilot, Codex, or Cursor.
- Related technical degree.
- Preferred experience building or operating certificate, identity, or key-management services at scale.
- Preferred familiarity with SPIFFE, short-lived credentials, post-quantum cryptography, ML-KEM, ML-DSA, hybrid key exchange in TLS 1.3, Merkle Tree Certificates, and crypto-agility design.
- Contribution to standards bodies such as IETF, the CA/Browser Forum, or NIST, or to major open-source projects, is preferred.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- The role may be eligible for incentive compensation, equity, and benefits.
- Salesforce provides reasonable accommodations during the application and recruiting process.
Tech Stack
About Informatica
Informatica (NYSE: INFA), a leader in AI-powered enterprise cloud data management, helps businesses unlock the full value of their data and AI. As data grows in complexity and volume, Informatica’s Intelligent Data Management Cloud™ delivers a complete, end-to-end platform with a suite of industry-leading, integrated solutions to connect, manage and unify data across any cloud, hybrid or multi-cloud environment. Powered by CLAIRE® AI, Informatica’s platform integrates natively with all major cloud providers, data warehouses and analytics tools— giving organizations the freedom of choice, avoiding vendor lock-in and delivering better ROI by enabling access to governed data, simplifying operations and scaling with confidence. Trusted by approximately 5,000 customers in nearly 100 countries—including over 80 of the Fortune 100—Informatica is the backbone of platform-agnostic, cloud data-driven transformation. Informatica. Where data and AI come to life.™ Contact: PR@informatica.com