3 months ago
Base Salary
$166k - $323k/yr
Responsibilities
- Represent GoDaddy in IETF working groups covering TLS and related SSL standards.
- Assess CA infrastructure for architectural gaps, vulnerabilities, and performance bottlenecks.
- Define requirements for certificate issuance pipelines, HSM integrations, cryptographic key management, testing frameworks, CT logs, OCSP responders, and revocation mechanisms.
- Develop compliance automation scripts and requirements for continuous monitoring, automated remediation, and infrastructure-as-code deployments.
- Research post-quantum algorithms and hybrid certificate chains and define migration strategies for legacy cryptographic systems.
- Create technical specifications for ACME extensions, Certificate Transparency v2, delegated credentials, and other emerging standards.
- Define requirements and roadmaps for CA APIs, certificate issuance and renewal workflows, self-service platforms, disaster recovery, and high availability.
- Establish CA compliance engineering documentation standards and lead architecture reviews and technical design sessions.
- Partner with security engineering teams on threat modeling, secure coding, vulnerability management, and compliance engineering.
- Mentor engineers on PKI concepts, cryptographic implementations, and compliance engineering patterns.
Requirements
- 8+ years of hands-on engineering experience in PKI systems, applied cryptography, or security infrastructure with proven technical leadership.
- Deep expertise in PKI architecture, X.509 certificates, ASN.1 encoding, certificate chain validation, HSM operations, and cryptographic primitives.
- Experience translating CA/Browser Forum Baseline Requirements into technical specifications for key generation, certificate issuance, and audit logging.
- Systems engineering experience with distributed systems, API design, database architecture, and cloud infrastructure such as AWS, GCP, or Azure.
- Ability to define requirements for ACME, Certificate Transparency, OCSP, and CRL protocols and create compliance test automation.
- Advanced degree in Computer Science, Cryptography, Mathematics, or Electrical Engineering is preferred.
- Experience with post-quantum cryptographic algorithms, security audits such as WebTrust for CAs and ETSI EN 319 411, high-availability systems, HSMs, secure key ceremonies, and compliance validation automation is preferred.
- Security certifications such as CISSP, CEH, or specialized cryptography credentials are preferred.
- Contributions to PKI projects such as Boulder, cert-manager, OpenSSL, or BoringSSL are preferred.
- Familiarity with DevSecOps, CI/CD pipelines, Terraform, Kubernetes, Ansible, OpenSSL, BoringSSL, and PKCS#11 is preferred.
Benefits
- Remote work from a home office in eligible US locations, with occasional office visits for team events or meetings.
- Medical, dental, and vision insurance.
- 401(k) retirement plan, stock purchase plan, and financial education and advice.
- Paid sick time, flexible time off, paid holidays, wellness days, and paid parental leave.
- Life insurance, short- and long-term disability, AD&D insurance, and mental health or EAP programs.
- Tuition assistance, adoption, surrogacy, fertility, dependent daycare, and backup care benefits.
Tech Stack
Categories
About GoDaddy
GoDaddy provides domain registration, DNS, web hosting, website and commerce tools, security, email, and payments for small businesses and web professionals. It sells these as subscriptions and add-on services, including a website builder, marketing tools, and a domain aftermarket. Founded in 1997 and headquartered in Tempe, Arizona, the NYSE-listed company serves over 20 million customers and manages tens of millions of domains globally.