Software Engineering PMTS, Enterprise PKI

Salesforce
Bellevue
Full timeUSD 197,300 - 313,700 annuallyFunction: Software EngineeringExperience: 10+ yearsSkills: ["Technical leadership","Mentorship","Secure coding practices","Incident response","Root cause analysis"]

Build and evolve Salesforce’s nextGen Enterprise PKI platform for secure identity services. You’ll lead the architecture and implementation of EJBCA-based CA/RA infrastructure, OCSP responders, CRL distribution, and certificate lifecycle automation using modern enrollment protocols (ACME, EST, CMP) and REST certificate APIs. Work across hybrid cloud environments (AWS/Azure/GCP), integrate certificate-based authentication into CI/CD and platforms, and provide technical leadership for secure, scalable production systems.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Salesforce
Salesforce
1 day ago

Software Engineering PMTS, Enterprise PKI

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Build and evolve Salesforce’s nextGen Enterprise PKI platform for secure identity services. You’ll lead the architecture and implementation of EJBCA-based CA/RA infrastructure, OCSP responders, CRL distribution, and certificate lifecycle automation using modern enrollment protocols (ACME, EST, CMP) and REST certificate APIs. Work across hybrid cloud environments (AWS/Azure/GCP), integrate certificate-based authentication into CI/CD and platforms, and provide technical leadership for secure, scalable production systems.
Location: Bellevue
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Architect and lead the implementation and evolution of EJBCA-based Enterprise PKI infrastructure, including CA hierarchies, RA capabilities, OCSP responders, and CRL distribution.
  • •Own the technical design and delivery of the nextGen PKI platform, ensuring scalability, resiliency, security, and compliance across hybrid cloud environments.
  • •Lead adoption and support of modern certificate enrollment and management protocols (ACME, EST, CMP, REST certificate APIs) and migrate beyond legacy CA platforms.
  • •Design and build automation frameworks and APIs for certificate provisioning, renewal, revocation, monitoring, and audit logging.
  • •Drive certificate lifecycle management, expand PKI into new use cases (IoT identity, workload identity, mTLS, PQC readiness), and respond to PKI outages with incident analysis.

Pay and Benefits

Salary: USD 197,300 - 313,700 annually
Perks:MedicalDentalVisionHealth InsurancePaid ParentalLife InsuranceDisability Insurance401k

Key Requirements

  • •10+ years designing and operating enterprise-scale PKI with hands-on experience in EJBCA or comparable CA/RA platforms (e.g., ADCS, Dogtag, Vault PKI).
  • •Deep expertise in X.509 certificates and asymmetric cryptography, including certificate templates, key usages, trust chains, CRLs, and OCSP.
  • •Proven experience designing and building certificate lifecycle automation and management workflows.
  • •Hands-on experience with modern enrollment protocols (ACME, EST, CMP) and REST certificate APIs, including migration from legacy protocols such as NDES/SCEP on ADCS.
  • •Experience designing and building cloud-native PKI in AWS, Azure, and/or GCP, including familiarity with HSM integration, key escrow, and secure enclaves.
Experience:10+ yearsPKIEnterprise securityCloud-nativeHybrid cloudIdentity and access managementDevOpsIoTAI development
Education:
Skills:Technical leadershipMentorshipSecure coding practicesIncident responseRoot cause analysis
Tech Stack:JavaEnterprise Java BeansEJBCAActive Directory Certificate Services (ADCS)DogtagVault PKIX.509Asymmetric cryptographyOCSPCRLACMEEnrollment over Secure Transport (EST)Certificate Management Protocol (CMP)REST APIsMTLSIoTDevOpsCI/CDAWSAmazon Web Services

Company Brief

Salesforce
Provides a leading cloud-based customer relationship management (CRM) platform with sales, service, marketing, analytics, and integration tools that empower businesses to manage customer relationships and digital transformation at scale.
Industry: SaaS
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 1999
Glassdoor
Glassdoor: 4.1
WebsiteLinkedInGlassdoor