Enterprise PKI Architect & Platform Engineer

100 Salesforce, Inc.; Bellevue (WA); On-site; USD 197,000 - 314,000; Full time

Benefits offered by this job

Time off programs

Medical

Dental

Vision

Mental health support

Parental leave

Life and disability insurance

401(k)

Employee stock purchasing program

Job summary

Salesforce seeks an experienced PKI architect to lead the Enterprise PKI program across hybrid cloud environments. You will design and implement EJBCA-based CA/RA hierarchies, OCSP/CRL services, and modern enrollment protocols (ACME, EST, CMP) for cloud workloads and IoT.

You’ll drive automation, CI/CD, security practices, and mentor engineers while aligning PKI solutions with policy, regulatory standards, and enterprise risk controls.

Qualifications

• 10+ years in enterprise PKI design and operations.
• Deep understanding of X.509 certificates and cryptography.
• Experience with ACME, EST, CMP, and REST PKI APIs.
• Cloud PKI experience on AWS/Azure/GCP.
• Proficient in Golang and Python.

Responsibilities

• Architect and lead EJBCA-based PKI infrastructure, including CA hierarchies and RA capabilities.
• Own design and delivery of the next-gen PKI platform for hybrid cloud.
• Drive automation frameworks and APIs for certificate provisioning and Revocation.
• Lead lifecycle management for internal clients, devices, and workloads.
• Mentor engineers on cryptographic protocols and secure coding practices.

Skills

PKI design

EJBCA

Golang

Python

CI/CD

Git

Linux

Education

Bachelor's or Master's in CS/Engineering/Cybersecurity

Tools

ADCS

Dogtag

Vault PKI

Job description

Salesforce seeks an experienced PKI architect to lead the Enterprise PKI program across hybrid cloud environments. You will design and implement EJBCA-based CA/RA hierarchies, OCSP/CRL services, and modern enrollment protocols (ACME, EST, CMP) for cloud workloads and IoT.

You’ll drive automation, CI/CD, security practices, and mentor engineers while aligning PKI solutions with policy, regulatory standards, and enterprise risk controls.