Senior PKI & Crypto Infrastructure Engineer

United States Digital Space LLC; United States; Hybrid; USD 150,000 - 230,000; Full time

Job summary

the company in Austin, TX is hiring a Senior Software Engineer for PKI infrastructure. You will design and build core PKI systems, manage certificate lifecycles, and scale cryptographic operations across a global platform.

You will own the cryptographic core, integrate with HSMs, and automate issuance/renewal pipelines while maintaining meticulous audit trails and compliance with CA/B and WebTrust guidelines.

Qualifications

• 5+ years in production systems software with a strong ops record.
• Deep knowledge of applied cryptography and PKI.
• Familiarity with HSMs and PKCS#11.
• Strong systems programming in Go, Rust, or C/C++.
• Distributed, high-integrity systems experience.
• Experience designing database schemas (PostgreSQL).
• Security-first mindset with threat modelling.
• Comfort working on high-consequence systems.
• Bonus: CA, Boulder, or large-scale PKI exposure.

Responsibilities

• Design and build core PKI systems and certificate workflows.
• Own cryptographic core, including key lifecycle and HSM integration.
• Automate issuance/renewal pipelines and revocation at scale.
• Provide audit trails, CT integration, and tamper-evident logs.
• Maintain compliance with CA/B Forum and root programs.
• Represent the company in the WebPKI community and reports.
• Contribute to post-quantum migrations and secure upgrades.
• Own end-to-end code quality, observability, and runbooks.
• Collaborate with SSL/TLS product, infra, and security teams.
• Mentor engineers and raise engineering standards.

Skills

Production systems

Applied cryptography

PKI

HSM integration

Go/C/C++/Rust

Distributed systems

PostgreSQL

Threat modeling

Secure design

High-consequence work

Tools

PKCS#11

ACME

PostgreSQL

Job description

the company in Austin, TX is hiring a Senior Software Engineer for PKI infrastructure. You will design and build core PKI systems, manage certificate lifecycles, and scale cryptographic operations across a global platform.

You will own the cryptographic core, integrate with HSMs, and automate issuance/renewal pipelines while maintaining meticulous audit trails and compliance with CA/B and WebTrust guidelines.