Senior Staff Machine Identity and PKI Engineer
Nscale — New York, New York, United States · Hybrid · Staff+ · $190k - $260k/yearly
Role description
Role Overview
As a Senior Staff Machine Identity and PKI Engineer, you'll own long-term decisions that are hard to reverse, from certificate authority (CA) design to post-quantum planning, and set technical standards across SRE, platform and product.
What You Will Do
Build the non-human identity register, replace static, long-lived credentials with short-lived workload identity, own Nscale's PKI and lead implementation of a certificate lifecycle management platform, and set the machine secrets standard.
Why It Might Be a Fit
You'll bring 10+ years in platform engineering, infrastructure security or SRE, with deep work on workload identity, secrets and PKI, including designing CA hierarchies and leading standards adopted across several teams.
Requirements
- 10+ years in platform engineering, infrastructure security or SRE
- deep work on workload identity, secrets and PKI
- hands-on PKI experience covering CA hierarchy design, certificate profiles, revocation and HSMs
- production experience with HashiCorp Vault
- experience with cloud workload identity and OIDC federation from CI
- experience with Kubernetes service accounts and RBAC
- GCP experience is preferred
- ability to write code in Go or Python and work with Terraform
Benefits
- competitive US compensation package (base + bonus + equity)
- performance reviews every 12 months
- dynamic progression plan tailored to your ambitions
- Human-First Flexibility: flexible workplace trusts Nscalers to deliver
- medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation