Senior Software Engineer, KPI & Cryptographic Systems
Core
Design and build core PKI systems for certificate lifecycle management, key protection, and post-quantum migration at global scale.
Role type
Senior Software Engineer (PKI & Cryptographic Systems)
Builds
Certificate lifecycle management, key ceremony tooling, ACME issuance pipelines, and post-quantum cryptographic infrastructure.
Domain
Cybersecurity, Public Key Infrastructure (PKI), Applied Cryptography
Required skills
Applied cryptography, PKI (X.509, ACME, CT), HSM integration, Systems programming (Go/Rust/C++), Distributed systems, Database design (Postgres), Security engineering
Preferred skills
CA operations experience, Post-quantum cryptography, Formal methods, Kubernetes
Technologies
Go, Rust, C/C++, Postgres, PKCS#11, FIPS 140-2/3, ACME, Certificate Transparency
Responsibilities
Design and build core PKI systems for certificate lifecycle management and key parameter enforcement. Integrate with FIPS 140-2 Level 3/4 HSMs and build key ceremony tooling. Automate ACME-based issuance, renewal, and revocation pipelines at global scale. Instrument transparency and audit trails via Certificate Transparency and append-only logging. Maintain accreditation under CA/B Forum and WebTrust frameworks. Represent Cloudflare in the WebPKI community and write public incident reports. Contribute to post-quantum migration efforts. Own code end-to-end including observability and on-call posture. Mentor engineers and establish engineering standards and threat models.
Seniority
Senior, hands-on IC with mentorship responsibilities
