Lead Software Engineer, PKI & Cryptographic Trust Services

Salesforce

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
San Francisco, CABellevue, WA
Salary
$172,500–$260,100 / yr
Employment
Full-time
Posted
56 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $200k
This role $216k
$139k $273k
below market most similar roles pay here above market

This role pays more than 63% of similar roles. Most pay $165,639–$234,437 — the blue band above. At the midpoint, this role pays about $216k versus about $200k for comparable roles.

Based on 240 similar postings.

Employer

About Salesforce

Salesforce is the world''s leading customer relationship management (CRM) platform, offering cloud-based software for sales, service, marketing, analytics, and application development. Industry: Enterprise Software & Cloud Computing

Salesforce currently has 221 open roles on FindRole.

Listed pay typically runs $148,500–$260,100 across 125 roles with salary data.

Most-posted roles

View all roles at Salesforce

At a glance

TL;DR · Lead Software Engineer, PKI & Cryptographic Trust Services

JOB TITLE: Lead Software Engineer, PKI & Cryptographic Trust Services The Experience Salesforce Data Security team is seeking a Lead Software Engineer to architect, build, and scale a unified certificate Registration Authority. This foundational trust layer authenticates and authorizes millions of daily certificate issuance requests to secure machine-to-machine communication and data-in-transit across a global multi-cloud platform. You will design highly concurrent, multi-substrate build paths in Go, develop synchronous and asynchronous issuance paths using distributed state-machine orchestration, and implement hierarchical policy engines. Key responsibilities include mentoring engineers, managing certificate lifecycles, and integrating with public and private Certificate Authorities. You will utilize Go, Java, or Rust, alongside AI coding assistants like GitHub Copilot and Cursor. The role solves critical cryptographic trust problems, requiring expertise in PKI, X.509 profiles, mTLS, and post-quantum cryptography standards.

What you'll do

  • Architect, build, and maintain the unified Registration Authority for a global multi-cloud platform.
  • Design and optimize highly concurrent, multi-substrate build paths in Go for diverse public-cloud environments.
  • Develop and scale synchronous and asynchronous certificate issuance paths using distributed state-machine orchestration.
  • Implement hierarchical policy engines and authorization controls to validate workload identity and attestation.
  • Integrate and abstract multiple public and private Certificate Authorities to automate certificate lifecycle management.
  • Instrument comprehensive telemetry, distributed tracing, and alerting to maintain performance service level agreements.
  • Mentor engineers and conduct rigorous code reviews to improve distributed systems design and engineering excellence.
  • Translate complex compliance requirements into automated, scalable software controls in partnership with Security Architecture.

What we're looking for

  • You have 9+ years of professional software development experience designing and operating large-scale distributed systems.
  • You have production-grade expertise in Go (Golang), Java, or Rust, including advanced concurrency and memory management.
  • You have extensive experience deploying and operating highly available services on AWS or GCP.
  • You can design resilient RESTful and gRPC web services backed by distributed state machines and asynchronous processing.
  • You have a strong background in observability, telemetry, and modern CI/CD deployment pipelines.
  • You are proficient with AI coding assistants and have a demonstrated AI-first approach to engineering.
  • You have advanced prompt engineering skills to create reliable, secure, and production-ready AI outputs.
  • You have a Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

More like this

Similar roles

Software Engineer, Crypto Services - Key Management

Apple Inc

Austin, TX 159 days ago
Hardware Security Module (HSM) Post-Quantum Cryptography (PQC) Java Go Python C++ Key Management CI/CD DevOps Automated Testing Frameworks End-to-End Testing Systems Programming Cryptography
3+ yrs exp