Software Engineering PMTS, Enterprise PKI
InformaticaBase Salary
$197k - $314k/yr
Responsibilities
- Architect and lead implementation of EJBCA-based PKI infrastructure, including CA hierarchies, RA capabilities, OCSP responders, and CRL distribution.
- Own the technical design and delivery of a scalable, resilient, secure, and compliant next-generation PKI platform across hybrid cloud environments.
- Lead adoption of ACME, EST, CMP, and REST-based certificate APIs and modernization from legacy NDES/SCEP workflows.
- Build automation frameworks and APIs for certificate provisioning, renewal, revocation, monitoring, and audit logging.
- Drive certificate lifecycle management for enterprise applications, devices, workloads, and internal clients.
- Expand PKI use cases for IoT device identity, workload identity, mTLS, and PQC readiness.
- Integrate certificate-based authentication and certificate management with enterprise platforms, CI/CD pipelines, and cloud infrastructure.
- Lead cross-functional technical efforts, mentor engineers, and align PKI solutions with organizational policies, regulations, and compliance standards.
- Drive incident response and root cause analysis for PKI outages and certificate trust failures.
- Maintain architecture documentation, operational runbooks, and PKI standards.
- Build and ship production-grade software using modern engineering practices and AI-assisted development workflows.
- Design systems in which AI agents work within human workflows, maintain shared system context, and evaluate human- and AI-generated code for correctness, security, quality, and performance.
Requirements
- 10+ years of experience in enterprise-scale PKI design and operations.
- Hands-on expertise with EJBCA or comparable CA/RA platforms such as ADCS, Dogtag, or Vault PKI.
- Deep understanding of X.509 certificates, asymmetric cryptography, certificate templates, key usages, trust chains, CRLs, and OCSP.
- Experience designing certificate lifecycle automation and management workflows.
- Hands-on experience with ACME, EST, CMP, and REST certificate APIs, including migration from NDES/SCEP on ADCS.
- Demonstrated ability to lead cross-functional deployment and modernization of secure identity services.
- Experience with cloud-native PKI in AWS, Azure, and/or GCP.
- Familiarity with HSM integration, key escrow, and secure enclaves.
- Proficiency in Go and Python.
- Understanding of DevOps practices, CI/CD, monitoring, and production-system ownership.
- Experience with Git or Perforce and proficiency in Linux environments.
- Demonstrated AI-first engineering approach, including experience with Claude Code, GitHub Copilot, Codex, or Cursor.
- Advanced prompt engineering skills and ability to create reliable system context for secure, production-ready AI outputs.
- Bachelor’s or master’s degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent experience.
- Experience with Kubernetes or service mesh PKI environments such as Istio, SPIRE, or cert-manager is preferred.
- Exposure to IoT device identity, device attestation, TPM, Secure Boot, NIST PQC standards, CLM platforms, certificate observability, Zero Trust, MFA, secrets management, OWASP Top 10, and CWE Top 25 is preferred.
- Familiarity with NIST, ISO, SOC 2, and FIPS 140-2/3 security and compliance standards is preferred.
Benefits
- Salesforce offers time-off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- The position’s typical base salary range is $197,300–$313,700 annually, excluding bonus, equity, and benefits.
- Salesforce provides reasonable accommodations during the application and recruiting process.
Tech Stack
Categories
About Informatica
Informatica (NYSE: INFA), a leader in AI-powered enterprise cloud data management, helps businesses unlock the full value of their data and AI. As data grows in complexity and volume, Informatica’s Intelligent Data Management Cloud™ delivers a complete, end-to-end platform with a suite of industry-leading, integrated solutions to connect, manage and unify data across any cloud, hybrid or multi-cloud environment. Powered by CLAIRE® AI, Informatica’s platform integrates natively with all major cloud providers, data warehouses and analytics tools— giving organizations the freedom of choice, avoiding vendor lock-in and delivering better ROI by enabling access to governed data, simplifying operations and scaling with confidence. Trusted by approximately 5,000 customers in nearly 100 countries—including over 80 of the Fortune 100—Informatica is the backbone of platform-agnostic, cloud data-driven transformation. Informatica. Where data and AI come to life.™ Contact: PR@informatica.com