Senior Software Engineer, PKI & Cryptographic Systems

What you'll do

• Design and build core PKI systems including certificate lifecycle management, issuance logic, and policy engines.
• Integrate with FIPS-certified Hardware Security Modules (HSMs) to manage key ceremonies and enforce strict usage boundaries.
• Automate large-scale ACME-based issuance, renewal pipelines, and revocation mechanisms for global infrastructure.
• Implement Certificate Transparency integration and build tamper-evident logging for third-party audits.
• Maintain compliance with CA/Browser Forum standards and respond to evolving regulatory requirements.
• Represent the company in the WebPKI community through technical writing and incident reporting.
• Develop and implement post-quantum cryptographic solutions to secure infrastructure against future threats.
• Manage code end-to-end, including production incident response, observability, and on-call rotations.

What we're looking for

• You must have 5+ years of production systems software experience with a proven operational track record.
• You must possess deep working knowledge of applied cryptography and PKI, including X.509, ASN.1/DER, RFC 5280, and ACME.
• You must have a strong systems programming background in Go, Rust, or C/C++.
• You must demonstrate distributed systems fluency for building globally replicated, availability-critical services.
• You must be able to design and operate database schemas for high-integrity systems like Postgres.
• You must possess security-hardened system design instincts including threat modeling and secure key handling.
• You must be authorized to receive software or technology controlled under U.S. export control laws.
• Experience with a public/private CA, post-quantum cryptography, or Kubernetes is preferred.