Senior PKI & AI-Driven Software Engineer Lead

Salesforce; Bellevue (KY); On-site; USD 197,000 - 314,000; Full time

Job summary

Salesforce is seeking a Principal Software Engineer to shape the nextGen PKI platform within the Enterprise Security Technology team. You will design, implement, and scale certificate authority hierarchies, RA capabilities, OCSP responders, and CRL distribution across hybrid cloud environments.

AI will be integrated to accelerate secure development and operations. You will lead adoption of modern enrollment protocols (ACME/EST/CMP/REST), drive automation, and mentor engineers while collaborating

Qualifications

• 10+ years of enterprise PKI design and operations experience.
• Strong knowledge of X.509, certificates, trust chains, OCSP and CRLs.
• Experience building certificate lifecycle automation and modern enrollment protocols.

Responsibilities

• Architect and lead PKI infrastructure using EJBCA-based CA/RA components.
• Deliver scalable, secure PKI across hybrid cloud environments.
• Design and integrate modern enrollment/provisioning protocols (ACME/EST/CMP/REST).
• Build automation frameworks and APIs for certificate provisioning and auditing.
• Drive PKI adoption for IoT, workload identity, and mTLS.
• Lead cross-functional PKI projects with cloud, security and DevOps teams.

Skills

PKI design

EJBCA/ADCS experience

X.509 cryptography

ACME/EST/CMP/REST APIs

Cloud PKI (AWS/Azure/GCP)

Golang/Python

CI/CD/DevOps

Linux

Git/version control

AI-first engineering

Education

Bachelor's or Master's in Computer Science or related field

Tools

Kubernetes

ADCS

Venafi/CLM

NDES/SCEP (legacy)

Git

Job description

Salesforce is seeking a Principal Software Engineer to shape the nextGen PKI platform within the Enterprise Security Technology team. You will design, implement, and scale certificate authority hierarchies, RA capabilities, OCSP responders, and CRL distribution across hybrid cloud environments.

AI will be integrated to accelerate secure development and operations. You will lead adoption of modern enrollment protocols (ACME/EST/CMP/REST), drive automation, and mentor engineers while collaborating