Senior PKI & Certificate Lifecycle Engineer - Remote

Keeper Security

United States

Remote

USD 140,000 - 180,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical, Dental & Vision insurance

Employer Paid Life Insurance

Voluntary Disability Insurance

401K

Job summary

Keeper Security is seeking a Staff Software Engineer specializing in Certificate Lifecycle Management to architect and build next-generation certificate and machine identity security capabilities within the Keeper platform.

This 100% remote role offers potential hybrid options for candidates in the Chicago, IL or El Dorado Hills, CA metro areas. Collaborate with Engineering, Product, Security and DevOps to translate complex certificate requirements into secure, scalable systems.

Qualifications

8+ years of professional software engineering experience with backend/infrastructure/security systems.
Deep hands-on experience with certificate lifecycle management, PKI or machine identity security.
Strong understanding of X.509 certificates, CAs, trust stores, private keys and cryptography.
Experience with certificate lifecycle operations: discovery, enrollment, issuance, deployment, renewal, rotation, revocation, expiration.
Knowledge of PKI protocols and technologies (ACME, SCEP, EST, OCSP, CRLs, TLS).
Backend experience in Java/Go/Python/C#/C++ or similar.
Experience designing scalable APIs, distributed systems and automation workflows.
Experience integrating with enterprise PKI systems and cloud platforms.
Leadership in architecture discussions and mentoring engineers.

Responsibilities

Architect and develop certificate lifecycle management capabilities across diverse environments.
Design scalable backend services and APIs for certificates and machine identities.
Build discovery and automation workflows across clouds, Kubernetes, web servers and networks.
Integrate with public/private CAs and enterprise PKI environments.
Develop secure workflows for enrollment, key handling and deployment.
Lead architecture reviews and set engineering standards for security-sensitive cert mgmt.