JR354749 Lead Software Engineer, PKI & Cryptographic Trust Services
Salesforce2 months ago
Base Salary
$173k - $286k/yr
Responsibilities
- Architect, build, and maintain the unified Registration Authority for global certificate issuance.
- Design and optimize concurrent, multi-substrate Go build paths for public-cloud deployment.
- Develop synchronous and asynchronous certificate issuance workflows using distributed state-machine orchestration.
- Implement hierarchical policy engines and authorization controls for workload identity and attestation.
- Manage certificate lifecycles and integrate multiple public and private Certificate Authorities.
- Write resilient, observable, thoroughly tested production software that withstands infrastructure degradation.
- Implement telemetry, distributed tracing, metrics, and alerting to support availability and performance SLAs.
- Mentor engineers, conduct rigorous code reviews, and lead distributed-systems design improvements.
- Partner with Security Architecture to convert compliance requirements into automated software controls.
- Resolve complex distributed-systems escalations and implement durable architectural fixes.
- Establish AI-augmented development practices, prompt engineering workflows, and shared system context.
- Design systems where AI agents integrate into human workflows and evaluate human- and AI-generated code for quality, security, and performance.
Requirements
- 9+ years of professional software development experience designing and operating large-scale distributed systems.
- Production-grade expertise in Go, Java, or Rust, including concurrency, memory management, and multi-substrate build configurations.
- Experience deploying and operating highly available, mission-critical services across AWS and GCP.
- Ability to design RESTful and gRPC services backed by distributed state machines and asynchronous processing pipelines.
- Strong observability experience involving telemetry, distributed tracing, metrics, and CI/CD deployment pipelines.
- Experience using AI coding assistants such as Claude Code, GitHub Copilot, Codex, or Cursor.
- Advanced prompt engineering skills and experience developing reliable shared system context for AI workflows.
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
- Preferred knowledge of PKI, X.509 certificate profiles, mTLS architectures, certificate lifecycle management, and automated provisioning.
- Preferred familiarity with post-quantum cryptography standards including ML-KEM and crypto-agility design.
- Preferred experience with Kubernetes, container orchestration, Infrastructure-as-Code, multi-tenant policy engines, and hierarchical authorization graphs.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Salesforce provides reasonable accommodations during the application and recruiting process and is an equal opportunity employer.
Tech Stack
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.