Principal PKI Architect for Enterprise Security & AI

salesforce.com, inc.; Bellevue (WA); On-site; USD 197,000 - 314,000; Full time

Job summary

Salesforce is seeking a Principal Software Engineer to architect and lead PKI infrastructure across hybrid cloud, driving scalable, secure certificate management with modern protocols and AI-driven development. You will mentor teams, own RA/EJBCA-based components, and integrate PKI across CI/CD and cloud platforms.

Your expertise in X.509, cryptography, and cloud PKI, plus hands-on experience with ADCS/Venafi, will help advance our secure identity strategy at enterprise scale.

Qualifications

• 10+ years in enterprise PKI design and operations
• Deep knowledge of X.509 certificates, cryptography, trust chains
• Experience automating certificate lifecycles and workflows
• Hands-on with modern enrollment protocols: ACME, EST, CMP, REST APIs
• Cloud-native PKI in AWS/Azure/GCP
• Proficient in Golang and Python
• Strong DevOps, CI/CD, monitoring ownership
• Familiar with Git, Linux, and secure coding practices
• AI-first engineering mindset and experience using AI tools in development
• Bachelor's or Master's in CS/Engineering/Cybersecurity or equivalent

Responsibilities

• Architect and lead EJBCA-based PKI infrastructure design and evolution
• Own the next-gen PKI platform across hybrid cloud for scalability and security
• Lead adoption of modern enrollment protocols beyond legacy CA platforms
• Develop automation frameworks and APIs for certificate provisioning and revocation
• Drive PKI lifecycle management for various internal clients and workloads
• Expand PKI into IoT identity, workload identity, and mTLS
• Integrate certificate-based authentication across CI/CD and cloud
• Collaborate with security teams to meet regulatory standards
• Mentor engineers on cryptographic protocols and secure coding
• Lead incident response and RCA for PKI outages
• Document architecture and PKI standards
• Build high-quality, production-grade software with AI integration
• Design AI systems where agents operate within human workflows
• Contribute to shared system context and code evaluation for correctness

Skills

PKI design

EJBCA

X.509

ACME/EST/CMP/REST PKI

Cloud PKI (AWS/Azure/GCP)

Golang

Python

CI/CD

AI in development workflows

Prompt engineering

Education

Bachelor's or Master's in CS/Engineering/C cybersecurity

Tools

EJBCA

ADCS

Venafi/CLM

Kubernetes

Docker

Job description

Salesforce is seeking a Principal Software Engineer to architect and lead PKI infrastructure across hybrid cloud, driving scalable, secure certificate management with modern protocols and AI-driven development. You will mentor teams, own RA/EJBCA-based components, and integrate PKI across CI/CD and cloud platforms.

Your expertise in X.509, cryptography, and cloud PKI, plus hands-on experience with ADCS/Venafi, will help advance our secure identity strategy at enterprise scale.