Senior PKI & Crypto Engineer - Post-Quantum Ready

Cloudflare, Inc.; Austin, Northern (TX, KY); Hybrid; USD 190,000 - 230,000; Full time

Benefits offered by this job

Equity plan

Health & Welfare Benefits

Flexible PTO

Parental leave

Job summary

Cloudflare, Inc. is hiring a Senior Software Engineer for PKI & cryptographic systems in a hybrid role based in Austin. You will design and build the systems that manage certificate lifecycles, protect private keys at scale, and integrate with hardware security modules.

You will work at the intersection of applied cryptography, distributed systems, and security engineering to shape Cloudflare’s PKI stack for the post-quantum era. This early-stage team offers impactful work and strong ownership.

Qualifications

• 5+ years of production systems software experience.
• Familiarity with HSMs and PKCS#11.
• Strong systems programming in Go, Rust, or C/C++.
• Distributed systems with global availability and strict correctness.
• Experience designing database schemas for high-integrity systems.
• Security-hardened design with threat modeling and least privilege.

Responsibilities

• Own the cryptographic core and ensure secure key management.
• Automate issuance/renewal pipelines and scale certificate operations.
• Instrument transparency with tamper-evident logging and audits.
• Maintain compliance with CA/B Forum, WebTrust, and root stores.
• Represent Cloudflare in the WebPKI community and publish incident reports.
• Contribute to post-quantum migration and modern cryptographic tooling.
• Own end-to-end code and establish observability and runbooks.
• Collaborate with SSL/TLS, HSM, and data-centre teams across Cloudflare.

Skills

Production systems software

Go/Rust/C/C++

Distributed systems

PKI/cryptography

HSM integration

Public CA/WebPKI

Tools

PKCS#11

HSMs

OpenSSL

BoringSSL

CFSSL

Job description

Cloudflare, Inc. is hiring a Senior Software Engineer for PKI & cryptographic systems in a hybrid role based in Austin. You will design and build the systems that manage certificate lifecycles, protect private keys at scale, and integrate with hardware security modules.

You will work at the intersection of applied cryptography, distributed systems, and security engineering to shape Cloudflare’s PKI stack for the post-quantum era. This early-stage team offers impactful work and strong ownership.