Senior PKI Architect: AI-Driven Security Platform

Salesforce

Bellevue (WA)

On-site

USD 197,000 - 314,000

Full time

14 days+

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Salesforce seeks a Principal Software Engineer for Enterprise Security PKI. You will shape the architecture of next-gen PKI across hybrid clouds, integrating AI into secure, scalable certificate workflows.

Lead and mentor teams, implement modern enrollment protocols, and drive automated provisioning, revocation, and auditing for enterprise-scale systems. You will work with EJBCA/ADCS and cloud platforms (AWS/Azure/GCP), applying cryptography expertise and CI/CD practices to deliver

Qualifications

10+ years in enterprise PKI design and operations.
Hands-on with EJBCA, ADCS, Dogtag or similar PKI platforms.
Strong knowledge of X.509, cryptography and PKI workflows.
Experience with modern enrollment protocols (ACME, EST, CMP, REST APIs).
Proven leadership of cross-functional teams in secure identity services.

Responsibilities

Architect and lead EJBCA-based PKI infrastructure, CA hierarchies, RA capabilities and OCSP/CRL components.
Own design and delivery of scalable, secure PKI across hybrid clouds.
Drive adoption of modern enrollment protocols and automate certificate management.
Build automation for provisioning, renewal, revocation, monitoring and audit logging.
Mentor engineers on cryptography, secure coding and identity primitives.
Collaborate with security, infra and application teams to meet policies and compliance.