Senior PKI & Machine Identity Architect

nscaleoperationsukltd; United States; Remote; USD 210,000 - 270,000; Full time

Benefits offered by this job

Competitive base + bonus + equity

Performance reviews every 12 months

Flexible workplace

Job summary

Nscale is seeking a Senior Staff Machine Identity and PKI Engineer to set technical standards across SRE, platform and product. You will own decisions from CA design to post-quantum planning and bring deep expertise in machine identity, secrets and PKI.

You will build a non-human identity register, automate credential issuance, and define how AI agents authenticate with scalable security controls. This role offers a competitive US compensation package and equity.

Qualifications

• 10+ years in platform engineering, infrastructure security or SRE.
• Experience designing CA hierarchies and leading standards across teams.
• Hands-on PKI including vault and dynamic secrets.
• Cloud workload identity, OIDC federation and Kubernetes RBAC.
• Ability to write code in Go or Python and use Terraform.

Responsibilities

• Build a non-human identity register with owner, scope and rotation dates.
• Replace static credentials with short-lived workload identity using OIDC and federation.
• Own PKI and lead implementation of a certificate lifecycle management platform.
• Automate issuance and renewal using ACME, cert-manager and EST/SCEP.
• Define machine secrets standard and collaborate with SRE on Vault integration.
• Plan for post-quantum cryptography across the certificate estate.

Skills

workload identity

secrets management

PKI

CA hierarchies

Go or Python

Tools

HashiCorp Vault

cert-manager

EST/SCEP

GitHub Actions OIDC

Keyfactor

Entrust

AppViewX

DigiCert

Job description

Nscale is seeking a Senior Staff Machine Identity and PKI Engineer to set technical standards across SRE, platform and product. You will own decisions from CA design to post-quantum planning and bring deep expertise in machine identity, secrets and PKI.

You will build a non-human identity register, automate credential issuance, and define how AI agents authenticate with scalable security controls. This role offers a competitive US compensation package and equity.