Principal Engineer Cryptography

Role overview Set technical direction for the systems and standards behind a certificate authority platform. You’ll translate evolving security standards into engineering requirements, assess infrastructure, and guide work on certificate automation, resilient operations, and preparation for post-quantum cryptography. The position combines deep PKI expertise with cross-team technical leadership.

Responsibilities - Participate in relevant IETF standards work, including working groups for TLS and related protocols. - Assess certificate authority infrastructure for architectural gaps, security weaknesses, and performance constraints. - Specify requirements for certificate issuance pipelines, hardware security module integrations, and key management. - Define compliance testing and monitoring needs for certificate transparency logs, OCSP, and revocation systems; create supporting automation scripts. - Establish service indicators and objectives for issuance speed, availability, and compliance, and document infrastructure requirements for deployment, recovery, and high availability. - Guide evaluation and migration planning for post-quantum algorithms, hybrid certificate chains, and emerging standards; lead design reviews and mentor engineers.

Requirements - At least eight years of hands-on engineering in PKI, applied cryptography, or security infrastructure, with technical leadership experience. - Strong engineering background in a language such as Go, Python, Java, or C++. - Deep knowledge of PKI architecture, including X.509 certificates, ASN.1 encoding, and certificate chains. - Ability to turn technical standards and security needs into clear platform requirements and specifications. - Experience collaborating across engineering and security teams, leading architecture discussions, and documenting technical decisions.

Benefits and work setup Remote work from the United States, with occasional office visits; some states and territories are excluded. Benefits include health coverage, retirement savings, paid time off, parental leave, and wellness support, with eligibility and offerings varying by location. The listing gives location-dependent pay ranges.