Remote Senior PKI & Certificate Lifecycle Engineer

Embedded Shishya; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental & Vision

Employer Paid Life Insurance

Voluntary Disability Insurance

401K

Generous PTO

Above-market bonuses

Job summary

Keeper Security is seeking a Staff Software Engineer focused on Certificate Lifecycle Management to lead architecture and development of PKI and machine identity capabilities across enterprise environments.

You will shape backend services, APIs, automation workflows and integrations, partnering with Engineering, Product, Security, and DevOps to deliver secure, scalable certificate management at scale.

Qualifications

• 8+ years of professional software engineering experience.
• Deep hands-on experience with certificate lifecycle management, PKI or machine identity security.
• Strong understanding of X.509 certificates, CAs, trust stores and public key cryptography.
• Experience with certificate lifecycle operations: discovery, enrollment, issuance, deployment, renewal, rotation, revocation and expiration.
• Experience with PKI protocols and technologies such as ACME, SCEP, EST, OCSP, CRLs and TLS.
• Backend software engineering experience using Java, Go, Python, C++, C# or similar.
• Experience designing scalable APIs, distributed systems and automation workflows.
• Experience integrating with enterprise PKI systems and cloud platforms.

Responsibilities

• Architect and develop certificate lifecycle management capabilities across discovery, enrollment, issuance, deployment, renewal, rotation and revocation.
• Design scalable backend services and APIs for certificates, machine identities and cryptographic metadata.
• Build certificate discovery and automation workflows across cloud, Kubernetes, web servers and networks.
• Design integrations with public and private certificate authorities and enterprise PKI environments.
• Develop secure workflows for certificate enrollment, key handling and trust validation.
• Lead architecture discussions and mentor engineers on PKI‑related solutions.
• Collaborate with product and engineering leadership on technical strategy and platform direction.

Skills

Software engineering

PKI expertise

Certificate lifecycle

Java

Go

Python

C++

C#

Education

Bachelor's degree in Computer Science/Engineering or related field

Tools

Keyfactor

DigiCert

Venafi

AppViewX

Sectigo

Microsoft AD CS

Job description

Keeper Security is seeking a Staff Software Engineer focused on Certificate Lifecycle Management to lead architecture and development of PKI and machine identity capabilities across enterprise environments.

You will shape backend services, APIs, automation workflows and integrations, partnering with Engineering, Product, Security, and DevOps to deliver secure, scalable certificate management at scale.