Senior PKI Architect for Enterprise & AI-Driven Cloud

Salesforce, Inc.; Bellevue, Northern (WA, KY); Hybrid; USD 197,000 - 314,000; Full time

Benefits offered by this job

Time off programs

Medical

Dental

Vision

Mental health support

Paid parental leave

Life and disability insurance

401(k)

Employee stock purchasing program

Job summary

Salesforce, Inc. is seeking an experienced PKI Architect to design and lead enterprise PKI across hybrid cloud environments. You will drive CA/RA operations, implement modern enrollment protocols, and automate certificate management at scale.

You will mentor engineers, define cryptographic standards, and ensure compliance while integrating certificate-based authentication into CI/CD pipelines and cloud platforms.

Qualifications

• 10+ years of experience in enterprise-scale PKI design and operations.
• Hands-on experience with EJBCA or comparable CA/RA platforms.
• Deep understanding of X.509 certificates, cryptography, trust chains, CRLs and OCSP.
• Experience designing certificate lifecycle automation and management workflows.
• Experience with modern enrollment protocols (ACME, EST, CMP) and REST certificate APIs.

Responsibilities

• Architect and lead PKI infrastructure design and evolution (EJBCA-based).
• Own the design and delivery of a next-gen PKI platform for hybrid cloud.
• Lead adoption of modern enrollment protocols and automated certificate management.
• Build automation frameworks and APIs for provisioning, renewal, revocation, monitoring, and auditing.
• Drive PKI lifecycle management across internal clients, apps, devices, and workloads.
• Expand PKI into IoT identity, workload identity, mTLS, and PQC readiness.
• Integrate certificate-based auth across CI/CD pipelines and cloud infra.
• Collaborate with security, infra, and app teams to meet policy and compliance.
• Provide technical leadership and mentorship on cryptographic protocols and secure coding.

Skills

EJBCA

PKI

X.509

ACME

EST

CMP

REST APIs

Golang

Python

CI/CD

Git

Linux

AI-first engineering

AI tools (Claude Code, Copilot)

Education

Bachelor's or Master's in CS/Engineering/Cybersecurity

Tools

ADCS

Dogtag

Vault PKI

Venafi

AppViewX

Kubernetes (cert-manager)

NDES/SCEP migration

Job description

Salesforce, Inc. is seeking an experienced PKI Architect to design and lead enterprise PKI across hybrid cloud environments. You will drive CA/RA operations, implement modern enrollment protocols, and automate certificate management at scale.

You will mentor engineers, define cryptographic standards, and ensure compliance while integrating certificate-based authentication into CI/CD pipelines and cloud platforms.