Remote Principal Cryptography Engineer, PKI & Post-Quantum

Webhosting; Northern (KY); Hybrid; USD 165,000 - 249,000; Full time

Benefits offered by this job

Remote work options

Comprehensive benefits package

Job summary

GoDaddy is seeking a Principal Compliance Engineer – PKI to define requirements and guide the evolution of our Certificate Authority platform. You will translate industry standards into technical requirements, guide compliance automation, and provide guidance for cryptographic systems, focusing on post-quantum readiness and CA infrastructure resilience.

You will lead technical design, collaborate with security teams, mentor engineers, and help shape high-availability CA deployments, HSM

Qualifications

• Advanced degree in Computer Science, Cryptography, Mathematics, or Electrical Engineering is required.
• Experience researching and evaluating post-quantum cryptographic algorithms (NIST PQC finalists, hybrid modes).
• Security certifications such as CISSP, CEH, or specialized cryptography credentials are beneficial.
• Experience with security audit processes (WebTrust for CAs, ETSI EN 319 411) from a technical implementation perspective.
• Contributions to PKI-related projects (Boulder, cert-manager, OpenSSL, BoringSSL, etc.).
• Experience defining requirements for high-availability systems design, hardware security modules (HSMs), and secure key ceremony procedures.
• Knowledge of DevSecOps practices, CI/CD pipelines for security-critical systems, and infrastructure automation (Terraform, Kubernetes, Ansible).
• Familiarity with cryptographic libraries (OpenSSL, BoringSSL, PKCS#11) and performance considerations for cryptographic operations.
• Experience developing test automation scripts for compliance validation.

Responsibilities

• Lead PKI standards and requirements leadership.
• Conduct deep-dive assessments of CA infrastructure for gaps and vulnerabilities.
• Define requirements for certificate issuance pipelines, HSM integrations, and key management.
• Specify automated testing frameworks for compliance validation and CT/OCSP setups.
• Develop automation scripts for compliance testing and remediation workflows.
• Define SLIs/SLOs for certificate issuance latency and availability.

Skills

PKI concepts

Cryptography

DevSecOps practices

CI/CD for security-critical systems

Terraform

Kubernetes

OpenSSL

BoringSSL

HSM integrations

APIs & automation

Education

Advanced degree in Computer Science, Cryptography, Mathematics, or Electrical Engineering

CISSP, CEH, or specialized cryptography credentials

Tools

Terraform

Kubernetes

Ansible

OpenSSL

BoringSSL

PKCS#11

cert-manager

Job description

GoDaddy is seeking a Principal Compliance Engineer – PKI to define requirements and guide the evolution of our Certificate Authority platform. You will translate industry standards into technical requirements, guide compliance automation, and provide guidance for cryptographic systems, focusing on post-quantum readiness and CA infrastructure resilience.

You will lead technical design, collaborate with security teams, mentor engineers, and help shape high-availability CA deployments, HSM