Software Engineering PMTS, Enterprise PKI

Salesforce

Confirmed live yesterday High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Bellevue, WA
Employment: Full-time
Posted: 56 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $198k

$128k $285k

below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $169,550–$226,350.

Based on 240 similar postings.

Employer

About Salesforce

Salesforce is the world''s leading customer relationship management (CRM) platform, offering cloud-based software for sales, service, marketing, analytics, and application development. Industry: Enterprise Software & Cloud Computing

Salesforce currently has 220 open roles on FindRole.

Listed pay typically runs $148,500–$260,100 across 130 roles with salary data.

Most-posted roles

View all roles at Salesforce

At a glance

TL;DR · Software Engineering PMTS, Enterprise PKI

Role Posting Log in to save

JOB TITLE: Software Engineering PMTS, Enterprise PKI As a Principal Software Engineer on the Enterprise Security Technology team, you will architect and lead the evolution of the nextGen PKI platform. You will design and build scalable, fault-tolerant systems for certificate authority hierarchies, registration authority capabilities, and automated enrollment protocols like ACME, EST, and CMP. Your daily work involves developing automation frameworks for certificate provisioning, renewal, and revocation across hybrid cloud environments including AWS, Azure, and GCP. You will utilize Golang, Python, and AI-driven engineering workflows to manage X.509 certificates, asymmetric cryptography, and HSM integrations. The role addresses the technical challenge of providing secure, production-grade identity services for cloud-native, IoT, and DevOps workloads while ensuring compliance with NIST and FIPS standards across internal infrastructure and public cloud platforms.

Skills

PKI EJBCA X.509 ACME EST CMP mTLS Post-Quantum Cryptography AWS Azure GCP Golang Python CI/CD Kubernetes Istio SPIRE cert-manager Git Linux HSM Vault Venafi AppViewX Zero Trust MFA NIST FIPS) 140-2/3 SOC 2 GitHub Copilot Claude Code Cursor

What you'll do

Architect and lead the implementation of EJBCA-based PKI infrastructure including CA hierarchies and OCSP responders.
Own the technical design and delivery of a scalable nextGen PKI platform across hybrid cloud environments.
Lead the adoption of modern certificate enrollment protocols like ACME, EST, and CMP for cloud-native and IoT workloads.
Design and build automation frameworks and APIs for certificate provisioning, renewal, revocation, and audit logging.
Drive certificate lifecycle management for internal clients, applications, devices, and workloads at enterprise scale.
Expand PKI capabilities into new use cases including IoT identity, mTLS, and Post-Quantum Cryptography readiness.
Build and ship production-grade software using modern engineering practices and AI-driven development workflows.
Provide technical leadership and mentorship to engineers on cryptographic protocols and secure coding practices.

What we're looking for

You must have 10+ years of experience in enterprise-scale PKI design and operations.
You must have hands-on expertise in EJBCA or comparable CA/RA platforms like ADCS, Dogtag, or Vault PKI.
You must have a deep understanding of X.509 certificates, asymmetric cryptography, trust chains, CRLs, and OCSP.
You must have proven experience designing and building certificate lifecycle automation and management workflows.
You must have hands-on experience with modern enrollment protocols including ACME, EST, CMP, and REST certificate APIs.
You must be proficient in programming languages such as Golang and Python.
You must have a Bachelor's or Master's degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent experience.
You should have experience with PKI in Kubernetes or service mesh environments (preferred).

Save