JR354749 Lead Software Engineer, PKI & Cryptographic Trust Services

Leadout Capital; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Salesforce Data Security seeks a Lead Software Engineer to architect, build, and scale a unified Registration Authority for a global, multi-cloud platform. You’ll lead design decisions, drive concurrency, and mentor engineers in an AI-first environment.

You will own the end-to-end certificate issuance paths, integrate with multiple CAs, and ensure high-availability with strict security. This role emphasizes strong coding, testing, and cross-team collaboration.

Qualifications

• Nine or more years of professional software development experience.
• Deep production-grade expertise in Go, Java, or Rust with concurrency.
• Experience deploying mission-critical services on AWS and GCP.
• Strong observability and CI/CD deployment track record.

Responsibilities

• Architect, build, and scale a unified Registration Authority for a multi-cloud platform.
• Design highly concurrent multi-substrate build paths in Go and multi-cloud deployment.
• Develop synchronous and asynchronous certificate issuance paths and policy engines.
• Mentor engineers, conduct code reviews, and drive distributed-systems best practices.

Skills

Distributed systems design

Go (Golang)

Java

Rust

Cloud deployments

CI/CD

Observability

AI tooling

Prompt engineering

Education

Bachelor's degree in CS/Engineering

Tools

Go

Java

Rust

AWS

GCP

Kubernetes

CI/CD pipelines

Telemetry

Job description

The Experience

Salesforce Data Security is seeking a Lead Software Engineer to architect, build, and scale our unified certificate Registration Authority (RA), the front door for cryptographic trust across our global multi-cloud platform. This foundational trust layer authenticates and authorizes millions of certificate issuance requests daily, securing machine-to-machine communication, workload identity, and data-in-transit for the world's most trusted enterprise cloud. You lead the technical design and delivery of a highly concurrent, multi-substrate Go codebase, stay deep in the code while mentoring senior engineers, and drive architectural consensus across a distributed system where availability and security are non-negotiable. This is an AI-first engineering team: you use advanced AI coding assistants, prompt engineering, and shared-system-context tools daily to accelerate your workflows, review code, and generate comprehensive tests, setting the standard for AI-augmented software development.

What You'll Actually Be Doing

• Architect, build, and maintain the unified Registration Authority (RA) that serves as the single certificate-issuance front door for a global, multi-cloud platform.
• Design and optimize highly concurrent, multi-substrate build paths in Go, ensuring seamless deployment across diverse public-cloud environments.
• Develop and scale both synchronous and asynchronous certificate issuance paths using robust distributed state-machine orchestration.
• Implement strictly evaluated hierarchical policy engines and authorization controls to validate substrate-specific workload identity and attestation.
• Drive robust certificate lifecycle management and automation by integrating with and abstracting multiple public and private Certificate Authorities (CAs).
• Lead the team's engineering excellence by writing resilient, observable, and strictly tested code capable of surviving underlying infrastructure degradation.
• Instrument comprehensive telemetry, distributed tracing, and alerting to maintain stringent availability and performance service level agreements (SLAs).
• Act as a technical multiplier, mentoring engineers, conducting rigorous code reviews, and raising the bar for distributed systems design.
• Partner with Security Architecture to translate complex compliance requirements into automated, scalable software controls.
• Respond to and resolve complex distributed systems escalations, identifying root causes and deploying durable architectural fixes.
• Elevate team productivity by establishing best practices for AI-augmented software development and prompt engineering.
• Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow, pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.
• Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale.
• Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably, and critically evaluate code (human- or AI-generated) for correctness, quality, security, and performance.

You're Our Person If...

• You have 9+ years of professional software development experience, with a proven track record of designing and operating large-scale distributed systems.
• You have deep, production-grade expertise in Go (Golang), Java, or Rust, including advanced concurrency patterns, memory management, and multi-substrate build configurations.
• You have extensive experience deploying and operating highly available, mission-critical services across public cloud providers such as Amazon Web Services (AWS) and Google Cloud Platform (GCP).
• You can design resilient Representational State Transfer (RESTful) and gRPC web services, backed by robust distributed state machines and asynchronous processing pipelines.
• You have a strong background in observability (telemetry, distributed tracing, metrics) and modern continuous integration/continuous delivery (CI/CD) deployment pipelines.
• You are proficient with AI coding assistants and shared-context workflows that enhance engineering velocity.
• You have a demonstrated, genuine AI-first approach to engineering, using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.
• You have experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor, etc.) in development workflows.
• You have advanced prompt engineering skills and the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production-ready.
• You have a Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

Even Better If...

• You have deep domain knowledge of Public Key Infrastructure (PKI), X.509 certificate profiles, and mutual Transport Layer Security (mTLS) architectures.
• You have a strong understanding of certificate lifecycle management and automated certificate provisioning.
• You are aware of post-quantum cryptography (PQC) standards, such as Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM), and crypto-agility design principles.
• You have experience with Kubernetes, container orchestration, and Infrastructure-as-Code paradigms.
• You are familiar with designing or operating multi-tenant policy engines and hierarchical authorization graphs.