Global PKI & Trust Architect – AI-Driven Security

Salesforce, Inc.; Bellevue (WA); On-site; USD 218,000 - 365,000; Full time

Job summary

Salesforce is seeking an Architect to define strategy and technical direction for certificate lifecycles, trust, and cryptographic identities across workloads and AI agents. You will own the multi-year architecture and drive globally available, scalable trust infrastructure on cloud platforms such as AWS and GCP, with a focus on zero-downtime migrations and security standards.

You’ll stay hands-on, prototyping and coding critical paths, while presenting proposals to executives and mentoring

Qualifications

• 12+ years of experience designing and operating large-scale distributed systems.
• Deep expertise in distributed-systems architecture, reliability, and performance at scale.
• Hands-on experience operating mission-critical, highly available services on public cloud platforms such as AWS or GCP, including Kubernetes and service mesh.
• Security domain experience in identity and authorization, applied cryptography, or infrastructure security.
• Knowledge of PKI, X.509 certificates, mutual TLS, and key management.
• Proven leadership in aligning cross-organizational initiatives without direct authority.
• Strong communication skills with a track record of presenting architecture proposals to engineers and executives.

Responsibilities

• Own target architecture and multi-year strategy for certificate lifecycle, trust distribution, and cryptographic identity across workloads and AI agents.
• Architect highly available, globally scalable trust infrastructure with measurable SLAs and fleet-wide automated renewal.
• Drive automation-first, cost-effective architecture with zero-touch lifecycle operations and zero-downtime migrations.
• Establish standards for interfaces between the trust platform and dependent infrastructure and guide teams through trade-offs.
• Stay hands-on by prototyping, writing critical-path code, and validating architecture in live systems.
• Present investment and architecture proposals to senior leadership and mentor engineering leads.

Skills

Distributed systems

PKI

Security architecture

Cloud platforms (AWS/GCP)

Kubernetes

mTLS

Leadership

Education

Related technical degree

Tools

AWS

GCP

Kubernetes

Job description

Salesforce is seeking an Architect to define strategy and technical direction for certificate lifecycles, trust, and cryptographic identities across workloads and AI agents. You will own the multi-year architecture and drive globally available, scalable trust infrastructure on cloud platforms such as AWS and GCP, with a focus on zero-downtime migrations and security standards.

You’ll stay hands-on, prototyping and coding critical paths, while presenting proposals to executives and mentoring