Senior PKI & Cryptography Architect - Remote

GoDaddy Inc.; Northern (KY); Hybrid; USD 165,000 - 249,000; Full time

Benefits offered by this job

Remote or hybrid work

Employee stock purchase plan

Healthcare benefits

Job summary

GoDaddy is seeking a Principal Compliance Engineer - PKI to lead the requirements for our certificate authority platform. You will shape post-quantum readiness, certificate lifecycle automation, and CA resilience with cross-team collaboration.

You will participate in standards bodies, define architecture for issuance pipelines, HSMs, and automated tests, while mentoring engineers and documenting technical designs.

Qualifications

• 8+ years in PKI, cryptography, or security infra with leadership.
• Deep PKI architecture knowledge and X.509 concepts.
• Experience translating CA/B Forum requirements into specs.
• Distributed systems, APIs, and cloud infrastructure experience.
• Ability to define PKI protocols and test automation requirements.

Responsibilities

• Actively participate in IETF and TLS/SSL standard work groups.
• Assess CA infrastructure for gaps, security and performance bottlenecks.
• Define requirements for certificate issuance pipelines, HSMs, and key management.
• Specify automated testing for compliance validation and CT/OCSP components.
• Develop scripts for compliance testing and remediation workflows.
• Define SLIs/SLOs for latency, availability and compliance metrics.

Skills

PKI engineering

Go/Python

C++

Cloud (AWS/GCP/Azure)

OpenSSL/BoringSSL

Tools

HSM operations

Boulder/OpenSSL knowledge

Job description

GoDaddy is seeking a Principal Compliance Engineer - PKI to lead the requirements for our certificate authority platform. You will shape post-quantum readiness, certificate lifecycle automation, and CA resilience with cross-team collaboration.

You will participate in standards bodies, define architecture for issuance pipelines, HSMs, and automated tests, while mentoring engineers and documenting technical designs.