Software Engineering Architect, PKI & Trust Services
Salesforce1 day ago
Base Salary
$218k - $401k/yr
Responsibilities
- Own the target architecture and multi-year strategy for certificate lifecycle, trust distribution, and cryptographic identity across workloads and AI agents.
- Architect highly available, globally scalable trust infrastructure with measurable SLOs and automated fleet-wide certificate renewal.
- Drive automation-first architecture supporting zero-touch lifecycle operations, zero-downtime migrations, and data-driven build-versus-buy decisions.
- Establish architectural and security standards for interfaces between the trust platform and dependent infrastructure.
- Prototype, write critical-path code, and validate architecture in live systems.
- Present architecture and investment proposals to senior leadership, mentor engineering leads, and scale technical expertise across the organization.
Requirements
- 12+ years of experience designing and operating large-scale distributed systems or infrastructure services.
- Proven success driving multi-team technical strategy into production.
- Deep expertise in distributed-systems architecture, reliability, and performance at scale.
- Hands-on experience operating highly available, mission-critical services on AWS or GCP, including Kubernetes and service mesh.
- Security experience in identity and authorization, applied cryptography, or infrastructure security.
- Working knowledge of PKI, X.509 certificates, mTLS, and key management.
- Proven ability to align cross-organizational initiatives without direct authority.
- Strong communication skills, including authoring adopted architecture proposals and presenting to engineers and executives.
- Experience using AI development tools such as Claude Code, GitHub Copilot, Codex, or Cursor.
- Related technical degree.
- Preferred experience building or operating certificate, identity, or key-management services at scale.
- Preferred familiarity with SPIFFE, short-lived credentials, PQC standards, ML-KEM, ML-DSA, hybrid key exchange in TLS 1.3, Merkle Tree Certificates, and crypto-agility design principles.
- Preferred contributions to standards bodies such as IETF, the CA/Browser Forum, or NIST, or to major open-source projects.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Certain roles may be eligible for incentive compensation, equity, and benefits.
Tech Stack
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.