Senior PKI & Certificate Infrastructure Engineer

Coinbase, Inc.; Annapolis (MD); Hybrid; USD 186,000 - 219,000; Full time

Job summary

Coinbase is seeking a Senior Software Engineer in the Security Platform Engineering group to lead cryptographic infrastructure and PKI initiatives that underpin both public and internal systems.

You will design high-availability services, drive secure key management with HSMs or cloud KMS, mentor engineers, and collaborate with Security, Product, and Policy to deliver resilient, compliant solutions in a zero-trust environment.

Qualifications

• 5+ years of experience in software engineering building highly available, distributed systems.
• Deep domain expertise in PKI and applied cryptography with certificate authorities, X.509 lifecycles, and private key protection with HSMs or cloud KMS.
• Extensive programming in Golang, Java, C++, or Rust in a Golang-heavy environment.
• Proven track record leading a team's technical strategy and architecture for large-scale, regulated projects.
• Ability to translate regulatory requirements into robust engineering solutions; responsible AI usage with human oversight.

Responsibilities

• Lead the architecture and execution of critical cryptographic infrastructure.
• Define technical strategies with a multi-quarter horizon for novel cryptographic solutions.
• Own risky initiatives, implementing secure protocols in a zero-trust environment.
• Mentor engineers and drive rigorous code reviews to improve engineering quality.
• Coordinate with Security, Product, and Policy for flawless execution.

Skills

PKI / cryptography

Distributed systems

Golang

Java

C++

Rust

Security leadership

Zero-trust / security

Tools

HSMs

Cloud KMS

Certificate Authority

Job description

Coinbase is seeking a Senior Software Engineer in the Security Platform Engineering group to lead cryptographic infrastructure and PKI initiatives that underpin both public and internal systems.

You will design high-availability services, drive secure key management with HSMs or cloud KMS, mentor engineers, and collaborate with Security, Product, and Policy to deliver resilient, compliant solutions in a zero-trust environment.