JR354749 Lead Software Engineer, PKI & Cryptographic Trust Services
Salesforce2 days ago
Base Salary
$173k - $286k/yr
Responsibilities
- Architect, build, and maintain the unified Registration Authority for global certificate issuance.
- Design and optimize concurrent, multi-substrate Go build paths for public-cloud deployment.
- Develop synchronous and asynchronous certificate issuance workflows using distributed state-machine orchestration.
- Implement hierarchical policy engines and authorization controls for workload identity and attestation.
- Manage certificate lifecycles and integrate multiple public and private Certificate Authorities.
- Write resilient, observable, thoroughly tested production software that withstands infrastructure degradation.
- Implement telemetry, distributed tracing, metrics, and alerting to support availability and performance SLAs.
- Mentor engineers, conduct rigorous code reviews, and lead distributed-systems design improvements.
- Partner with Security Architecture to convert compliance requirements into automated software controls.
- Resolve complex distributed-systems escalations and implement durable architectural fixes.
- Establish AI-augmented development practices, prompt engineering workflows, and shared system context.
- Design systems where AI agents integrate into human workflows and evaluate human- and AI-generated code for quality, security, and performance.
Requirements
- 9+ years of professional software development experience designing and operating large-scale distributed systems.
- Production-grade expertise in Go, Java, or Rust, including concurrency, memory management, and multi-substrate build configurations.
- Experience deploying and operating highly available, mission-critical services across AWS and GCP.
- Ability to design RESTful and gRPC services backed by distributed state machines and asynchronous processing pipelines.
- Strong observability experience involving telemetry, distributed tracing, metrics, and CI/CD deployment pipelines.
- Experience using AI coding assistants such as Claude Code, GitHub Copilot, Codex, or Cursor.
- Advanced prompt engineering skills and experience developing reliable shared system context for AI workflows.
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
- Preferred knowledge of PKI, X.509 certificate profiles, mTLS architectures, certificate lifecycle management, and automated provisioning.
- Preferred familiarity with post-quantum cryptography standards including ML-KEM and crypto-agility design.
- Preferred experience with Kubernetes, container orchestration, Infrastructure-as-Code, multi-tenant policy engines, and hierarchical authorization graphs.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Salesforce provides reasonable accommodations during the application and recruiting process and is an equal opportunity employer.
Tech Stack
About Salesforce
We're the #1 AI CRM—where humans with agents drive customer success together with AI, data, and Customer 360 apps on one platform. Privacy Statement: http://www.salesforce.com/company/privacy/