Staff Software Engineer, Certificate Lifecycle Management

About the Job

Keeper Security is hiring a Staff Software Engineer, Certificate Lifecycle Management to help architect and build the next generation of certificate and machine identity security capabilities within the Keeper platform. This is a 100% remote position, with an opportunity to work a hybrid schedule for candidates based in the Chicago, IL or El Dorado Hills, CA metro areas.

Keeper’s cybersecurity software is trusted by millions of people and thousands of organizations globally. Keeper is published in 23 languages and sold in over 150 countries. Join one of the fastest-growing cybersecurity companies and help solve complex engineering challenges across PKI, certificate discovery, lifecycle automation, cryptographic trust and enterprise infrastructure.

Responsibilities

• Architect and develop certificate lifecycle management capabilities spanning discovery, inventory, enrollment, issuance, deployment, renewal, rotation and revocation
• Design scalable backend services and APIs for managing certificates, machine identities and related cryptographic metadata across enterprise environments
• Build certificate discovery and automation workflows across cloud platforms, Kubernetes, web servers, load balancers, databases, network devices and other infrastructure
• Design integrations with public and private certificate authorities and enterprise PKI environments
• Develop secure workflows for certificate enrollment, key handling, trust validation and certificate deployment
• Solve complex engineering challenges involving certificate chains, trust stores, expiration, ownership, policy enforcement and cryptographic compliance
• Design systems that support automated certificate renewal and remediation while minimizing operational disruption
• Provide technical leadership on PKI architecture, machine identity, cryptographic standards and certificate automation
• Partner with Product and Engineering leadership on technical strategy, architecture, requirements and long-term platform direction
• Lead technical design reviews, mentor engineers and help establish engineering standards for security-sensitive certificate management