Lead Software Engineer, PKI & Cryptographic Trust Services

Salesforce

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
San Francisco, CA
Salary
$172,500–$260,100 / yr
Posted
10 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $192k
This role $216k
$139k most similar roles pay here $273k

This role pays more than 71% of similar roles. Most pay $162,000–$222,000 — the shaded band above. At the midpoint, this role pays about $216k versus about $192k for comparable roles.

Based on 240 similar postings.

Employer

About Salesforce

Salesforce is the world''s leading customer relationship management (CRM) platform, offering cloud-based software for sales, service, marketing, analytics, and application development. Industry: Enterprise Software & Cloud Computing

Salesforce currently has 106 open roles on FindRole.

Listed pay typically runs $148,500–$260,100 across 98 roles with salary data.

Most-posted roles

View all roles at Salesforce

At a glance

TL;DR · Lead Software Engineer, PKI & Cryptographic Trust Services

Lead Software Engineer, PKI & Cryptographic Trust Services joins the Data Security team to architect, build, and scale a unified certificate Registration Authority. This critical infrastructure serves as the primary gateway for cryptographic trust across a global multi-cloud platform, securing machine-to-machine communication and data-in-transit. The role involves designing highly concurrent, multi-substrate Go codebases, managing distributed state-machine orchestration, and implementing hierarchical policy engines to validate workload identities. You will manage certificate lifecycle automation by integrating with various Certificate Authorities while ensuring high availability through robust telemetry and distributed tracing. The position requires expertise in Go, Java, or Rust, along with experience in gRPC, RESTful services, and cloud platforms like AWS and GCP. Additionally, you will champion an AI-first engineering approach, utilizing advanced prompt engineering and AI coding assistants to accelerate development and maintain high standards for secure, production-grade software.

What you'll do

  • Architect, build, and maintain a unified Registration Authority (RA) for certificate issuance across a multi-cloud platform.
  • Design and optimize highly concurrent, multi-substrate Go codebases to ensure seamless deployment across diverse cloud environments.
  • Develop both synchronous and asynchronous certificate issuance paths using distributed state-machine orchestration.
  • Implement hierarchical policy engines and authorization controls to validate workload identity and attestation.
  • Integrate with and abstract multiple public and private Certificate Authorities (CAs) for automated lifecycle management.
  • Instrument telemetry, distributed tracing, and alerting to maintain strict performance and availability SLAs.
  • Mentor engineers and conduct rigorous code reviews to ensure high standards in distributed systems design.
  • Establish best practices for AI-augmented software development using prompt engineering and shared system context tools.

What we're looking for

  • You must have 9+ years of professional software development experience with a track record of designing large-scale distributed systems.
  • You must have production-grade expertise in Go, Java, or Rust including advanced concurrency and memory management.
  • You must have experience deploying mission-critical services across public cloud providers like AWS and GCP.
  • You must be able to design resilient RESTful and gRPC web services with distributed state machines.
  • You must have a strong background in observability tools and modern CI/CD deployment pipelines.
  • You must demonstrate an AI-first approach using coding assistants, prompt engineering, and shared-context workflows.
  • You should have domain knowledge of PKI, X.509 certificates, mTLS, and post-quantum cryptography standards.
  • You must hold a Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

More like this

Similar roles

Software Engineer, Cryptography

Robinhood

Bellevue, WA +1 29 days ago $166,000$195,000
Python Go Java C# C++ Distributed Systems Infrastructure SRE Platform Engineering Cloud Security Key Management Secrets Management Cryptography Encryption Decryption Production Services
Hybrid