Senior Certificate Authority Architect Jobs

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Cloudflare is building a new public Certificate Authority for the Internet. We are looking for a senior technical architect to help define the systems, protocols, and security architecture behind it. This role spans applied cryptography, Web PKI, distributed systems, security engineering, compliance, and Internet standards. It will help Cloudflare build a CA that operates safely at Internet scale while establishing a credible path from today's X.509 eco

Location Details: At GoDaddy the future of work looks different for each team. Some teams work in the office full-time, others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely. This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. This position is not eligible to be performed in Alaska, Mississippi, North Dakota, or the Virgin Islands. GoDaddy is not currently considering candidates for this role in California, Seattle, or NYC. Join our team Come join GoDaddy's Identity and Access Management team as a Senior Systems Engineer, Directory Services and play a key role in powering the systems that keep our people, platforms, and customers connected and secure! You'll tackle complex challenges across Active Directory, Certificate Services, DNS, replication, and Linux integration while operating critical infrastructure at enterprise scale. This is an opportunity to make a real impact, drive modernization efforts, strengthen security, and help shape the future of identity services while expanding your expertise across both Windows and Linux environments. What you'll get to do... Secure, operate, and improve enterprise Active Directory services, including domain controllers, sites and services, Group Policy, authentication flows, and directory-integrated services Harden supporting directory services, including Windows Enterprise Certificate Authority, Windows Domain Name System, and Active Directory replication, to reduce identity infrastructure risk Investigate and resolve complex identity, authentication, Kerberos, Lightweight Directory Access Protocol, Domain Name System, certificate, and replication issues across Windows and Linux environments Support, maintain, and optimize secure Linux integrations with Active Directory using technologies such as System Security Services Daemon, r

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Senior Software Engineer within the Security Platform Engineering group, you'll serve as the primary execution anchor for our most critical regulatory and cryptographic initiatives. This team owns Coinbase's Public and Internal Certificate Management based systems, which is the bedrock for all Coinbase systems. You'll lead the development of high-availability services which provide novel certificate needs internally and with external partners. What you'll do: Lead the architecture and execution of critical cryptographic infrastructure Define technical strategies with a multi-quarter horizon, bringing clarity to highly ambiguous requirements for novel cryptographic solutions Own risky and ambitious initiatives, implementing secure and resilient cryptographic protocols in a high-stakes, zero-trust environment Shape engineering quality practices as a technical anchor and mentor within a team of senior engineers, driving rigorous code reviews and eliminating single points of failure Build alignment and secure commitment from cross-functional partners across Security, Product, and Policy to drive flawless execution Required Skills and Experience: 5+ years of experience in software engineering with demonstrated success building highly available, distributed systems Deep domain expertise in Public Key Infrastructure (PKI) and applied cryptography, with proven ex

NVIDIA is transforming how the world uses AI, cloud, and accelerated computing, and trust is at the center of that mission. Our Attestation and Trust Services team builds the secure cloud services that show customers their NVIDIA platforms are healthy, resilient, and ready for their most important workloads. In this role, you help design and run services that sit at the intersection of hardware, security, and large-scale distributed systems. We partner closely with security, silicon, platform, and cloud teams to bring new ideas into reliable production services that people rely on every day. We care about building systems that last, supporting each other, and creating space for learning and experimentation. If you enjoy solving complex problems, keeping services running smoothly, and collaborating with teammates from many disciplines, we would love to talk with you! What you’ll be doing: Your main focus will be on building and managing our core attestation cloud services. Day-to-day responsibilities include crafting APIs and integrations, boosting reliability, and working alongside NVIDIA teams to convert hardware trust mechanisms and standards into production-ready solutions. You will contribute significantly to shaping how customers verify that NVIDIA platforms are secure and prepared for their workloads. Crafting and evolving attestation cloud services, APIs, and SDK/CLI integration points that confirm the integrity of NVIDIA platforms across data center, AI, networking, and partner environments. Improving reliability and operational maturity through SLOs/SLIs, alerting, runbooks, incident response, and safe rollout practices. Crafting resilient service behavior that handles dependency failures, caching challenges, regional issues, customer-side resilience needs, and graceful degradation. Architecting trust-material distribution for certificate status, re

As Senior Corporate Counsel, you’ll help Coder move commercial agreements from the first redline to signature with clarity and good judgment. You’ll partner closely with Sales, Deal Desk, and Finance to negotiate contracts that support the business while managing legal risk. You’ll lead negotiations across our commercial agreements and help teammates work through legal questions as deals progress. You’ll bring practical guidance, clear communication, and a strong understanding of how in-house legal teams support growing businesses. What you’ll do here Draft, review, and negotiate commercial contracts with customers and business partners. Partner closely with Sales and Deal Desk throughout the contracting process. Work with Finance and other internal stakeholders to resolve commercial and contractual issues. Provide practical legal guidance that balances business goals with appropriate risk management. Help move negotiations forward by identifying issues, explaining tradeoffs, and finding workable solutions. Support consistent, efficient contracting practices as Coder grows. What we’re looking for 6+ years of legal experience, including significant in-house experience negotiating commercial software licensing contracts. A JD from an accredited law school. Qualified solicitor in England & Wales with a current practicing certificate, or otherwise qualified and in good standing to practice law in another relevant jurisdiction Strong commercial judgment and experience working directly with business stakeholders. Clear, concise written and verbal communication skills. The ability to manage multiple negotiations and priorities while maintaining attention to detail. A practical approach to legal advice, with the judgment to distinguish material risks from issues that should not slow a deal down. Bonus tacos if you have (Tacos? If you need an ice-breaker, ask how we say thanks by giving tacos!) Experience working with open source software or open source licensing. About

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Responsibilities: Design and develop control‑plane and system services for a firewall platform, operating above the networking dataplane (OSI Layer 3+). Build and maintain management interfaces and APIs , including configuration frameworks, CLI, secure access (SSH), logging, and diagnostics. Implement security services such as authentication (SAML), guest access, SSL/TLS handling, and certificate lifecycle management . Develop embedded services for content filtering , including URL categorization, reputation, and rating systems, along with SNMP/telemetry support. Lead efforts in licensing systems , vulnerability remediation, and secure architecture in collaboration with cross‑functional teams. Requirements: 8+ years of experience in C/C++ systems development for embedded platforms, security appliances, or network operating systems. Strong hands‑on expertise with configuration frameworks, service APIs, CLI development, logging systems, and secure remote access (SSH) . Solid understanding of L3–L7 networking and security concepts , including SSL/TLS, authentication, identity federation, and PKI. Experience with certificate management, license enforcement fra

Location : Bangalore/Pune About Team & About Role: As a Senior Software Engineer (SSE) in the Continuous Product Delivery (CPD) team, you will play a key role in providing long term stability and last mile delight to our customers. You will work closely with the core engineering team, product, and support org. You will be working across Rubrik releases on our on-premise data backup & management offering, with a focus on the identity and access layer that secures it. You are expected to develop a strong understanding of our product and engineering architecture — particularly how authentication and authorization flow through the system, including our integrations with enterprise identity providers, directory services, and certificate-based trust chains. We are seeking a highly skilled Golang developer with deep, practical experience in identity protocols (OIDC/OAuth 2.0, SAML 2.0) and applied cryptography/PKI. As a Software Engineer on this team, you will be responsible for designing, building, and hardening the systems that authenticate users, machines, and services across our platform — reasoning carefully about threat models, not just shipping features. You should have strong programming and troubleshooting skills, excellent design skills, and a solid understanding of distributed systems, OS fundamentals, and networking. The successful candidate will preferably have working knowledge of Active Directory and be able to work independently and as part of a team. Responsibilities Design, build, and harden identity and access flows — OIDC/OAuth 2.0, SAML 2.0, Active Directory integrations — that sit in front of mission-critical systems. Own token and assertion lifecycle correctness: issuance, validation, expiry, rotation, and failure-mode handling for JWT/JWKS and SAML assertions. Apply strong applied-cryptography and PKI practices (X.509 certs, key rotation, TLS) to keep the auth path secure by default, not as an afterthought. Build and maintain reverse-proxy/H

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Senior Security Engineer – Akamai & Edge Security Services designs, implements, administers, and optimizes security controls that protect enterprise web applications, APIs, and internet-facing services. This role provides senior technical expertise in Web Application Firewall (WAF), bot protection, DDoS mitigation, API security, DNS security, certificate management, and related edge security technologies. The position partners with application, cloud, infrastructure, network, and security teams to strengthen the enterprise digital perimeter, respond to security threats, troubleshoot complex issues, and continuously improve security controls and operational processes. The role participates in a rotating on-call schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes. Key Responsibilities: Security Engineering & Administration Administer and optimize Akamai security tec

Fanatics Commerce is the global leader in licensed sports merchandise, operating a vertically integrated platform that designs, manufactures, and delivers officially licensed apparel, jerseys, headwear, and collectibles for major leagues, teams, and events worldwide. With more than 900 e-commerce sites and a global omnichannel presence across digital, in-venue, and retail, Fanatics Commerce reaches fans in over 180 countries and powers official fan experiences for many of the world's most iconic sports properties. At Fanatics, we bring our BOLD Leadership Principles to life every day - building championship teams, obsessing over fans, acting with entrepreneurial speed, and delivering with a determined and relentless mindset. As we continue to scale our global platform, the IAM Engineer will play a critical role in building scalable, automated identity and access security capabilities across Fanatics Commerce. ROLE OVERVIEW We're looking for an IAM Engineer who places a strong emphasis on usable security and scaling successfully through automation — keeping pace with Fanatics Commerce's rapid growth without disrupting innovation. In this role, you will own the overall strategy, planning, development, and support of Fanatics' IAM solutions and associated processes, providing direction across federation, privileged access management, authentication and authorization, certificate management, and identity provisioning. The IAM Engineer delivers business and fan impact through BOLD leadership and execution excellence, leveraging data, automation, and AI-enabled insights. HOW WILL YOU DRIVE IMPACT Success is measured by the ability to deliver results through BOLD capabilities and measurable outcomes. Team & Leadership Impact (Build Championship Teams) Partner closely with service desk, systems engineering, network security, audit, application developers, and other engineers to design and maintain functional, scalable, and secure IAM operations. Act as the functional te

We are hiring a Senior Software Engineer to join our Server Security team. The Server Security team is a development-focused group within MongoDB's core engineering organization. Operating "close to the bottom of the stack," the team builds features that enable database users to secure their data globally. You will work on critical components including: Cryptography: Queryable Encryption , at-rest data encryption, and fundamental cryptographic principles. Identity & Access: Authentication and authorization systems, TLS, and X.509 certificate management Network Security: High-performance, low-latency networking protocols (PKI, Hashing, CRLs) System Integrity: Resilience, observability, and compliance assurance within a large-scale distributed database Our team champions a strong culture of inclusivity, diversity, and collaboration. If you want to work on a collaborative team that applies distributed systems fundamentals to deliver core features of a popular database, join us! Let’s change what’s possible for application developers, system architects, and database operators. The role As a Senior Engineer, you will apply distributed systems fundamentals to deliver core security features. You will be a leader in improving MongoDB's security posture by owning features and leading investigations into complex areas of the codebase. What you’ll do: Build and test new security features in a large, feature-rich C++ codebase Work across engineering, cloud services, and support teams to coordinate feature rollouts and changes Stand for code quality and security best practices, assisting fellow engineers in writing well-reasoned, secure code Use strong diagnostic intuition to solve thorny technical issues related to distributed systems, concurrency, and OS internals This role can be remote or hybrid anywhere in the USA or Canada. We will prioritize candidates who are already located in one of these countries. Candidate Profile We are looking for a highly technical engineer w

We are hiring a Senior Software Engineer to join our Server Security team. The Server Security team is a development-focused group within MongoDB's core engineering organization. Operating "close to the bottom of the stack," the team builds features that enable database users to secure their data globally. You will work on critical components including: Cryptography: Queryable Encryption , at-rest data encryption, and fundamental cryptographic principles. Identity & Access: Authentication and authorization systems, TLS, and X.509 certificate management Network Security: High-performance, low-latency networking protocols (PKI, Hashing, CRLs) System Integrity: Resilience, observability, and compliance assurance within a large-scale distributed database Our team champions a strong culture of inclusivity, diversity, and collaboration. If you want to work on a collaborative team that applies distributed systems fundamentals to deliver core features of a popular database, join us! Let’s change what’s possible for application developers, system architects, and database operators. The role As a Senior Engineer, you will apply distributed systems fundamentals to deliver core security features. You will be a leader in improving MongoDB's security posture by owning features and leading investigations into complex areas of the codebase. What you’ll do: Build and test new security features in a large, feature-rich C++ codebase Work across engineering, cloud services, and support teams to coordinate feature rollouts and changes Stand for code quality and security best practices, assisting fellow engineers in writing well-reasoned, secure code Use strong diagnostic intuition to solve thorny technical issues related to distributed systems, concurrency, and OS internals This role can be remote or hybrid anywhere in the USA or Canada. We will prioritize candidates who are already located in one of these countries. Candidate Profile We are looking for a highly technical engineer w

Transform technology into opportunity as an F5 Administrator at Leidos. You will play a crucial role in configuring, maintaining, and troubleshooting F5 load balancing and traffic management systems to ensure high availability, reliability, and performance of critical applications and services for USCENTCOM on the CITS contract. The F5 Administrator is responsible for the configuration, deployment, and maintenance of F5 BIG-IP systems, ensuring the optimal performance, security, and availability of critical applications. This role involves hands-on technical work, troubleshooting complex F5-related issues, and collaborating with various IT teams to integrate F5 solutions within the broader network and infrastructure environment. The F5 Administrator will contribute directly to the mission success of USCENTCOM by maintaining robust and efficient application delivery services. Primary Responsibilities: F5 System Configuration & Maintenance Configure, deploy, and maintain F5 BIG-IP systems, including Load Balancers, Application Delivery Controllers (ADCs), and SSL offloading configurations. Design and implement traffic management rules, including global server load balancing (GSLB) and local server load balancing (LSLB). Manage F5 configurations for SSL/TLS offloading, including key and certificate management for secure communication. Configure and maintain F5 iRules to manage application traffic and provide enhanced functionality for specific use cases. Assist in performing F5 system upgrades, patches, and troubleshooting tasks to ensure continued system functionality. Assist in the design and implementation of new F5 solutions to improve application delivery, scalability, and security. Troubleshooting & Performance Optimization Troubleshoot and r

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. About Access Essentials Team The Access Essentials team at Okta owns the core control plane backend services, cloud configuration APIs, security and access frameworks, and unified administrative web applications. Our services power core authentication, telemetry pipelines, feature flagging, telephony, certificate management, and admin UI console experiences across Okta's enterprise footprint. We build scalable, highly available backend microservices and web interfaces that serve millions of users and administrators globally. Position Overview As a Senior SET on the Access Essentials team, you will take end-to-end ownership of the test strategy, test automation, and quality engineering for our backend services, cloud APIs, and web frontend applications. You will work closely with local engineering teams, architects, product managers, and cross-functional US partners to design, build, and optimize scalable, automated test solutions that

About the Job: Software powers the world, and LaunchDarkly empowers teams to deliver and control it safely. As a Senior Backend Engineer on the Identity & Access Management team, you will own the systems every customer touches before they touch anything else: SAML and OAuth2 single sign-on, SCIM user and team provisioning, login and session management, multi-factor authentication, and the API key and token infrastructure that authenticates every request to our platform. When authentication is wrong, customers cannot get in at all — or the wrong person gets in. Security and availability here are commitments to our customers, not nice-to-haves. You and your team will make this stack operable and enterprise-ready. Technologies include Go, TypeScript, CockroachDB, Redis, AWS, and Terraform. Exact tool match matters far less than deep backend judgment and a track record of safely changing systems that are not allowed to be wrong. Responsibilities: Own LaunchDarkly’s authentication surface end to end — single sign-on, SCIM provisioning, login and session flows, multi-factor authentication, and API key and token authentication. Build the enterprise identity capabilities our largest customers require: additional identity-provider integrations, support for multiple IdPs per account, and MFA enforcement by default. Make the stack operable: SLOs, monitoring for certificate expiry and provisioning failures, actionable alerting, runbooks, and a sustainable on-call. Partner with Product Security on threat modeling, audit logging, and compliance requirements including SOC 2 and FedRAMP. Set the technical direction for identity at LaunchDarkly, and raise the bar for the engineers around you through design review and mentorship. Qualifications: 6+ years of professional software-engineering experience, with significant work on complex backend applications. Experience building or operating production authentication and identity systems. A track record on systems where correctness

Zoox's Network Security team architects and defends the digital borders of the company — from corporate offices to engineering labs and product/mission environments. As a Network Security Engineer, you will design, implement, and operate security controls across Zoox's enterprise, OT networks, and cloud infrastructure spanning on-premises data centers and public cloud environments (AWS, GCP), partnering closely with Network Engineering, IT, Product Security, and Software Engineering teams. In This Role, You Will... Design, implement, and maintain secure hybrid/multi-cloud network architectures (AWS/GCP, CloudWAN); enforce zero-trust access controls and network segmentation across corporate, data center, lab, and edge environments; develop and maintain related policies, standards, and architecture diagrams Own and operate next-generation firewall platforms (Palo Alto Networks, Fortinet), managing policy architecture, segmentation, NAT, URL filtering, SSL/TLS decryption, and threat prevention tuning Architect, operate, and own the lifecycle of secure remote access solutions (VPN, ZTNA, site-to-site tunnels), ensuring high availability, certificate-based authentication, and integration with identity providers (SAML, Entra ID) Drive automation and Infrastructure-as-Code (IaC) using Terraform, Python, CI/CD, and REST APIs for configuration management, firewall policies, and security baselines; integrate LLM-based tools to streamline operational tasks and reduce manual toil Oversee security operations including 24/7 network security monitoring, traffic analysis, threat detection, vulnerability assessments, and remediation; support compliance requirements by conducting security reviews for new projects and infrastructure changes Drive 802.1X/certificate-based Network Access Control (NAC) initiatives across wired and wireless environments Collaborate with team members and contribute to cross-functional securi