Senior PKI & Certificate Lifecycle Architect

Keepersecurity; United States; On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical, Dental & Vision

401K (Roth/Traditional)

Generous PTO & paid time off

Above-market annual bonuses

Job summary

Keeper Security is seeking a Staff Software Engineer to own architecture and development of certificate lifecycle management. This hands-on role focuses on PKI, machine identity, and secure automation across enterprise environments.

You will collaborate with product, security, DevOps and solutions teams to deliver scalable certificate management capabilities and define Keeper’s technical direction in this domain.

Qualifications

• 8+ years of professional software engineering experience.
• Deep hands-on PKI, certificate lifecycle management, or machine identity security.
• Strong knowledge of X.509 certificates, CAs, trust stores, private keys, and public key cryptography.
• Experience with certificate lifecycle operations including discovery, enrollment, issuance, deployment, renewal, rotation, revocation and expiration management.
• Strong knowledge of PKI protocols and technologies such as ACME, SCEP, EST, OCSP, CRLs and TLS.
• Backend software engineering experience with Java, Go, Python, C++, or C# or similar.
• Experience designing scalable APIs, distributed systems and automation workflows.
• Ability to lead architecture discussions and mentor engineers across teams.

Responsibilities

• Architect and develop certificate lifecycle management capabilities across discovery, enrollment, issuance, deployment, renewal, rotation and revocation.
• Design scalable backend services and APIs for certificates, machine identities and cryptographic metadata.
• Build certificate discovery and automation workflows across cloud platforms, Kubernetes, web servers and databases.
• Integrate with public/private certificate authorities and enterprise PKI environments.
• Develop secure workflows for enrollment, key handling, trust validation and deployment.
• Lead PKI architecture discussions and establish security-focused engineering standards.
• Mentor engineers and drive technical direction across teams.

Skills

PKI expertise

Certificate lifecycle mgmt

Backend design

Architecture leadership

Automation workflows

Cloud & Kubernetes

Mentoring engineers

Security best practices

TLS/cryptography

AI-assisted tooling

Education

Bachelor’s degree in CS/Engineering

Tools

Kubernetes

Cloud platforms

AD CS (Active Directory Certificate Services)

Job description

Keeper Security is seeking a Staff Software Engineer to own architecture and development of certificate lifecycle management. This hands-on role focuses on PKI, machine identity, and secure automation across enterprise environments.

You will collaborate with product, security, DevOps and solutions teams to deliver scalable certificate management capabilities and define Keeper’s technical direction in this domain.