Position Details

Salary $148K – $223K USD / year

Type Full-Time

Experience senior

Exp. Years 5+ years

Education Bachelor's degree in Computer Science, Engineering, Cybersecurity, or equivalent experience

Category Software Engineering

About this role

Senior PKI software engineer responsible for the design and deployment of enterprise PKI infrastructure and certificate lifecycle automation, including integration with cloud services and enrollment protocols.

Key Responsibilities

Contribute to PKI design; implement certificate lifecycle automation; support enrollment protocols (SCEP, EST, ACME, CMP); integrate PKI with enterprise platforms; collaborate with security and operations teams

Technical Overview

Hands-on PKI with EJBCA or similar CA/RA; strong scripting (Python/Go/Java); TLS/mTLS knowledge; HSM integration; cloud PKI integration; CI/CD ownership.

Ideal Candidate

The ideal candidate is a senior PKI software engineer with 5+ years in PKI and enterprise-grade security, experienced with EJBCA and cloud integration, plus strong Linux and scripting capabilities.

Must-Have Skills

5+ years PKI experienceEJBCA or similar CA/RA platforms8+ years scripting or programming (PythonGolangJava)X.509 certificatesCRLsOCSPcertificate templatestrust chainsEnrollment protocols: SCEPESTACMECMPCertificate lifecycle automationworkflows or CLM platformsHSM integrationLinux environmentsCloud environments (AWS) and PKI integration with cloud servicesDevOps practicesCI/CDBachelor's degree in Computer ScienceEngineeringCybersecurityor equivalent experience

Nice-to-Have Skills

Hardware-backed security (TPMHSM)PKI in Kubernetes/service mesh (IstioSPIREcert-manager)Device attestation / Secure BootSecurity frameworks (NISTISOSOC 2)

Tools & Platforms

EJBCAGitLinuxAWSAzureGoogle Cloud PlatformCI/CD

Required Skills

5+ years PKI experience; EJBCA; CA/RA; X.509; OCSP; CRL; SCEP; EST; ACME; CMP; HSM integration; Linux; Git; Python; Golang; Java; Kubernetes; AWS; Amazon Web Services; Azure; Google Cloud Platform; CI/CD

Hard Skills

PKIPublic Key InfrastructureEJBCACA/RAX.509OCSPCRLSCEPESTACMECMPHSMcertificate lifecycle automationLinuxGitPythonGolangJavaKubernetesAWSAmazon Web ServicesAzureGoogle Cloud PlatformCI/CD

Soft Skills

communicationcollaborationproblem-solvinginitiativeteamwork

Industry & Role

Industry SaaS

Job Function Design, implement, and operate enterprise PKI infrastructure and certificate lifecycle management

Role Subtype Backend Engineer

Tech Domains Linux, Python, Golang, Java, Git, Kubernetes, Amazon Web Services, Microsoft Azure, Google Cloud Platform

Keywords for Your Resume

PKIPublic Key InfrastructureEJBCACA/RAX.509OCSPCRLSCEPESTACMECMPHSMcertificate lifecycle automationLinuxGitPythonGolangJavaKubernetesAWSAmazon Web ServicesAzureGoogle Cloud PlatformCI/CD

Deal Breakers

Less than 5 years PKI experience, No EJBCA or CA/RA experience, No Linux experience, No cloud (AWS/Azure/GCP) PKI integration experience

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile

Senior Software Engineer, Enterprise PKI

Get matched to jobs like this