Senior PKI & Certificate Management Engineer (Remote)

Candidate; Northern (KY); Remote; USD 186,000 - 219,000; Full time

Job summary

Coinbase is seeking a Senior Software Engineer for its Security Platform Engineering group to own cryptographic infrastructure and PKI systems. You will guide architecture, ensure high availability, and collaborate with cross-functional partners across Security, Product, and Policy.

You will lead initiatives with a strong emphasis on secure, low-latency design, zero-trust environments, and rigorous reviews. Experience with HSMs or cloud KMS and operating critical infrastructure is required.

Qualifications

• 5+ years of experience building highly available, distributed systems.
• Deep PKI/cryptography experience, including certificate lifecycles, trust chains, and secure key material handling.
• Proficiency in systems languages (Golang, Java, C++, or Rust) and operating in a Golang-heavy environment.

Responsibilities

• Lead architecture and execution of critical cryptographic infrastructure.
• Define technical strategies with multi-quarter horizons for novel cryptographic solutions.
• Own risky, ambitious initiatives and implement secure, resilient cryptographic protocols in a zero-trust environment.
• Shape engineering quality practices, drive rigorous code reviews and eliminate single points of failure.
• Coordinate with Security, Product, and Policy to ensure flawless execution.

Skills

Distributed systems

PKI/cryptography

Golang

Java

C++

Rust

Leadership/mentoring

Tools

HSMs

Cloud KMS

Certificate Authorities

Job description

Coinbase is seeking a Senior Software Engineer for its Security Platform Engineering group to own cryptographic infrastructure and PKI systems. You will guide architecture, ensure high availability, and collaborate with cross-functional partners across Security, Product, and Policy.

You will lead initiatives with a strong emphasis on secure, low-latency design, zero-trust environments, and rigorous reviews. Experience with HSMs or cloud KMS and operating critical infrastructure is required.