Senior Machine Identity & PKI Architect — Flexible Role

Nscale; Oregon; Hybrid; USD 190,000 - 260,000; Full time

Benefits offered by this job

Bonus

Equity

Medical insurance

Flexible paid time off

Job summary

Nscale is seeking a Senior Staff Machine Identity and PKI Engineer in the United States. You will own PKI strategy, CA hierarchy design, and set standards across SRE, platform and product.

You will automate certificate issuance and renewal, implement short-lived identities, and drive post-quantum planning for the estate. You will work with HashiCorp Vault, Terraform and Kubernetes, and help define how AI agents secure their identities with owners and scoped access.

Qualifications

• 10+ years in platform engineering, infrastructure security or SRE.
• Experience designing CA hierarchies and PKI standards used across teams.
• Hands-on PKI with CA hierarchies, certificate profiles, revocation and HSMs.
• Experience with cloud workload identity and OIDC federation from CI and Kubernetes service accounts.

Responsibilities

• Build and own non-human identity registry: cloud service accounts, API keys, tokens and agent identities.
• Replace static credentials with short-lived workload identities using GitHub Actions OIDC and federation.
• Own certificate lifecycle management platform; automate issuance and renewal with ACME, cert-manager and EST/SCEP.
• Define how AI agents and tool integrations get identities with owners and scoped access.
• Plan for post-quantum cryptography across the certificate estate.

Skills

Platform engineering

Infrastructure security

SRE practices

Go or Python

Education

Bachelor's degree in a related field

Tools

HashiCorp Vault

Terraform

Kubernetes

Keyfactor

Entrust

AppViewX

DigiCert

Job description

Nscale is seeking a Senior Staff Machine Identity and PKI Engineer in the United States. You will own PKI strategy, CA hierarchy design, and set standards across SRE, platform and product.

You will automate certificate issuance and renewal, implement short-lived identities, and drive post-quantum planning for the estate. You will work with HashiCorp Vault, Terraform and Kubernetes, and help define how AI agents secure their identities with owners and scoped access.