Software Engineering Architect, PKI & Trust Services

What you'll do

• Own the target architecture and multi-year strategy for trust services, and lead execution through production.
• Design highly available, scalable infrastructure and drive automated certificate renewal, zero-touch operations, and zero-downtime migrations.
• Set architectural and security standards, prototype and write critical-path code, and guide teams and senior leaders on technical decisions.

What they ask for

• 12+ years designing and operating large-scale distributed systems or infrastructure services, with a record of delivering multi-team strategy into production.
• Deep expertise in distributed-systems architecture, reliability, and performance at scale; hands-on experience with mission-critical public-cloud services, Kubernetes, and service mesh.
• Security experience in identity and authorization, applied cryptography, or infrastructure security; working knowledge of PKI, X.509 certificates, mTLS, and key management.
• Cross-organizational leadership, strong technical communication, an AI-first engineering approach and experience using AI development tools; related technical degree.

Nice to have

• Experience building or operating certificate, identity, or key-management services at scale; familiarity with SPIFFE and short-lived credentials.
• Knowledge of post-quantum cryptography, crypto-agility, or contributions to technical standards bodies or major open-source projects.

Pay

$218,400 - $365,200 annually (base salary); $263,200 - $401,400 annually (base salary)

Tools

Amazon Web Services (AWS), Google Cloud Platform (GCP), Kubernetes, service mesh, PKI, X.509, mTLS, Claude Code

AI focus

Use AI tools in development workflows to accelerate engineering, build fluency across the stack, and contribute beyond the core specialty; the role also designs trust infrastructure for AI agent identity.