Staff Software Development Engineer in Test, PKI

Netskope; Santa Clara (CA); On-site; USD 158,000 - 225,500; Full time

Benefits offered by this job

Bonus plan eligibility

Stock award program

Comprehensive health plan

Job summary

Netskope is seeking a senior QA/SDET with deep PKI expertise to build and test secure cloud services. You will create scalable Python-based automation, design test strategies for certificate lifecycles and APIs, and collaborate with PMs, architects, and SREs to ensure system reliability.

Ideal candidates have 8+ years in software engineering, 5+ years in SDET for cloud apps, and hands-on experience with Python, PyTest, Selenium, and API testing.

Qualifications

• 8+ years in software engineering, with 5+ years in SDET roles for cloud apps.
• Expert-level Python skills and scalable framework development.
• Experience testing REST APIs, microservices, and distributed systems.
• Background in PKI: certificates, CAs, CSR, OCSP/CRL, TLS/mTLS, encryption.

Responsibilities

• Become a resident expert on Netskope’s PKI platform and ensure secure, reliable services.
• Collaborate with PMs and architects to shape requirements and review designs from start to finish.
• Design test strategies covering certificate lifecycles, APIs, and distributed cloud infrastructure.
• Build and maintain automation frameworks using Python, PyTest, and Selenium.
• Automate REST APIs, enrollment workflows, and essential services like OCSP and CRL.
• Validate TLS/mTLS, digital signatures, and encryption protocols to protect users.
• Own feature quality from code to production monitoring.
• Create automated suites for performance, resiliency, and chaos testing.
• Collaborate with SREs, Security Engineers, and Support teams to improve platform.
• Join on-call rotation to resolve customer issues and drive automation improvements.
• Improve CI/CD pipelines and engineering best practices.
• Mentor engineers and help lead the Quality Engineering direction.

Skills

Python

PyTest

Selenium

REST APIs

PKI

TLS/mTLS

Distributed systems

PostgreSQL

Education

Bachelor's degree in Computer Science

Tools

Docker

Kubernetes

GitHub Actions

Jenkins

Terraform

Job description

About Netskope

Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter @Netskope.

What you’ll be doing

• You’ll become a resident expert on Netskope’s PKI platform, ensuring our services are as secure and reliable as they are scalable.
• You’ll dive into the heart of the product lifecycle, partnering with PMs and Architects to shape requirements and review designs from the ground up.
• You’ll design smart test strategies that cover everything from certificate lifecycles to APIs and distributed cloud infrastructure.
• You’ll build and maintain powerful automation frameworks using tools like Python, PyTest, and Selenium.
• You’ll automate the tricky stuff: REST APIs, enrollment workflows, and essential services like OCSP and CRL.
• You’ll put our security to the test, validating TLS/mTLS, digital signatures, and encryption protocols to keep our users safe.
• You’ll own the quality of your features from the first line of code through to monitoring them in production.
• You’ll create automated suites that test performance, resiliency, and even chaos to make sure we stay up and running.
• You’ll team up with SREs, Security Engineers, and Support teams to make the whole platform better.
• You’ll join our on‑call rotation to solve real customer problems and turn those lessons into better automation.
• You’ll constantly look for ways to improve our CI/CD pipelines and engineering best practices.
• You’ll mentor other engineers and help lead the technical direction of our Quality Engineering group.

What you bring to the table

• At least 8 years in software engineering, with 5+ years focused on SDET roles for cloud apps.
• Expert‑level Python skills and a knack for building scalable frameworks.
• Real‑world experience with PyTest, Robot, Selenium, or Playwright.
• A background in testing REST APIs, microservices, and distributed systems.
• A rock‑solid understanding of PKI, specifically:
• X.509 Certificates
• Certificate Authorities (Root & Intermediate)
• Certificate Lifecycle Management
• Certificate Revocation (CRL/OCSP)
• Certificate Signing Requests (CSR)
• SSL/TLS and Mutual TLS (mTLS)
• Digital Signatures and Encryption
• Experience with heavy‑duty security products like SWG, CFW, or Zero Trust platforms.
• A deep understanding of networking basics: TCP/IP, DNS, Load Balancing, and HTTPS.
• Familiarity with identity protocols like OAuth 2.0, SAML, and JWT.
• A track record of validating highly available and secure distributed systems.
• Experience working with SQL and NoSQL databases like PostgreSQL or MongoDB.
• The ability to look at the "big picture" and make quality decisions that impact the entire product.
• AI‑Assisted Engineering: Proven practical adoption of AI tools (e.g., GitHub Copilot, Cursor, Gemini) for code generation, debugging, root cause analysis, and increasing delivery velocity.

Bonus points if you have

• Experience with Venafi, HashiCorp Vault, or other enterprise PKI solutions.
• Worked with HSMs and managed cryptographic keys.
• Experience in AWS, Azure, or GCP cloud environments.
• Skills with Docker, Kubernetes, and Helm.
• Hands‑on experience with GitHub Actions, Jenkins, or Drone.
• Used Terraform or Ansible to manage infrastructure.
• Experience with observability tools like Prometheus, Grafana, or Datadog.
• Linux mastery and shell scripting skills.
• Knowledge of service meshes like Istio or Linkerd.

Education

• A Bachelor's degree in Computer Science or equivalent discipline is required; a Master's degree is strongly preferred.

Compensation

At Netskope, salary is one component of our competitive total rewards package. The salary range for this position is as listed below. This is a national range. For purposes of complying with applicable laws, the range applies to candidates in California, Colorado, Illinois, Maryland, New York, Washington, and other states.

The successful candidate’s starting pay will also be determined based on job‑related skills, experience, qualifications, location, and market conditions.

In addition to salary, candidates may be eligible for other forms of compensation such as participation in a bonus plan (for non‑sales roles) and a stock award program. Candidates may also be eligible for a comprehensive health plan and other benefits that can be reviewed at Netskope Benefits site.

Salary Range: $158,000 – $225,500 USD

Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.

Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.

The application window for this position is expected to close within 50 days. You may apply by filling out the below information, or visiting our Netskope Careers site.