AI‑Driven PKI Architect & Security Engineer

Relha LLC; Bellevue, Northern (WA, KY); Hybrid; USD 197,000 - 314,000; Full time

Benefits offered by this job

Accommodations

Benefits package

Job summary

Salesforce is seeking a Principal Software Engineer for Enterprise PKI with AI-driven workflows. You will architect and evolve an EJBCA-based PKI platform, spanning CA hierarchies, RA, OCSP, and CRL services, across hybrid cloud environments.

You will drive automated certificate management using ACME/EST/CMP and REST APIs, mentor engineers, and collaborate with security and infrastructure teams to ensure scalability, security, and compliance at scale.

Qualifications

• 10+ years of experience in enterprise PKI design and operations and hands-on with EJBCA or comparable CA/RA platforms
• Strong knowledge of X.509 certificates, asymmetric cryptography, trust chains, CRLs, OCSP
• Experience designing certificate lifecycle automation and management workflows

Responsibilities

• Architect and lead the PKI infrastructure using EJBCA or equivalent, including CA hierarchies, RA, OCSP, and CRL distribution
• Own the design and delivery of a scalable, secure, hybrid-cloud PKI platform
• Lead adoption of modern enrollment protocols (ACME, EST, CMP, REST APIs) for automated certificate management
• Build automation frameworks and APIs for provisioning, renewal, revocation, and audit logging
• Drive PKI expansion into IoT, workload identity, mTLS, and PQC readiness
• Integrate certificate-based authentication across CI/CD pipelines and cloud infrastructure
• Collaborate with security, infrastructure, and application teams to align PKI with policy and compliance standards
• Provide technical leadership and mentorship on cryptographic protocols and secure coding practices

Skills

Golang

Python

DevOps practices

CI/CD

Monitoring

Education

Bachelor's or Master's in CS/Engineering/Cybersecurity

Tools

Git

Perforce

Linux

Job description

Salesforce is seeking a Principal Software Engineer for Enterprise PKI with AI-driven workflows. You will architect and evolve an EJBCA-based PKI platform, spanning CA hierarchies, RA, OCSP, and CRL services, across hybrid cloud environments.

You will drive automated certificate management using ACME/EST/CMP and REST APIs, mentor engineers, and collaborate with security and infrastructure teams to ensure scalability, security, and compliance at scale.