Lead Software Engineer (PKI & Cryptographic Trust Services)

• Salesforce Data Security is seeking a Lead Software Engineer to architect, build, and scale our unified certificate Registration Authority (RA), the front door for cryptographic trust across our global multi-cloud platform
• This foundational trust layer authenticates and authorizes millions of certificate issuance requests daily, securing machine-to-machine communication, workload identity, and data-in-transit for the world’s most trusted enterprise cloud
• You lead the technical design and delivery of a highly concurrent, multi-substrate Go codebase, stay deep in the code while mentoring senior engineers, and drive architectural consensus across a distributed system where availability and security are non-negotiable
• This is an AI-first engineering team: you use advanced AI coding assistants, prompt engineering, and shared-system-context tools daily to accelerate your workflows, review code, and generate comprehensive tests, setting the standard for AI-augmented software development
• Architect, build, and maintain the unified Registration Authority (RA) that serves as the single certificate-issuance front door for a global, multi-cloud platform
• Design and optimize highly concurrent, multi-substrate build paths in Go, ensuring seamless deployment across diverse public-cloud environments
• Develop and scale both synchronous and asynchronous certificate issuance paths using robust distributed state-machine orchestration
• Implement strictly evaluated hierarchical policy engines and authorization controls to validate substrate-specific workload identity and attestation
• Drive robust certificate lifecycle management and automation by integrating with and abstracting multiple public and private Certificate Authorities (CAs)
• Lead the team’s engineering excellence by writing resilient, observable, and strictly tested code capable of surviving underlying infrastructure degradation
• Instrument comprehensive telemetry, distributed tracing, and alerting to maintain stringent availability and performance service level agreements (SLAs)
• Act as a technical multiplier, mentoring engineers, conducting rigorous code reviews, and raising the bar for distributed systems design
• Partner with Security Architecture to translate complex compliance requirements into automated, scalable software controls
• Respond to and resolve complex distributed systems escalations, identifying root causes and deploying durable architectural fixes
• Elevate team productivity by establishing best practices for AI-augmented software development and prompt engineering
• Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow, pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code
• Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale
• Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably, and critically evaluate code (human- or AI-generated) for correctness, quality, security, and performance

Benefits

• Medical Care
• Life Insurance
• Retirement Savings
• Employee Assistance Programs
• With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year- You have a strong background in observability (telemetry, distributed tracing, metrics) and modern continuous integration/continuous delivery (CI/CD) deployment pipelines
• You have 9+ years of professional software development experience, with a proven track record of designing and operating large-scale distributed systems
• You can design resilient Representational State Transfer (RESTful) and gRPC web services, backed by robust distributed state machines and asynchronous processing pipelines
• You have a demonstrated, genuine AI-first approach to engineering, using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty
• You have advanced prompt engineering skills and the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production-ready
• You are proficient with AI coding assistants and shared-context workflows that enhance engineering velocity
• You have deep, production-grade expertise in Go (Golang), Java, or Rust, including advanced concurrency patterns, memory management, and multi-substrate build configurations
• You have experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor, etc.) in development workflows
• You have extensive experience deploying and operating highly available, mission-critical services across public cloud providers such as Amazon Web Services (AWS) and Google Cloud Platform (GCP)
• You have a Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience
• You have deep domain knowledge of Public Key Infrastructure (PKI), X.509 certificate profiles, and mutual Transport Layer Security (mTLS) architectures
• You have a strong understanding of certificate lifecycle management and automated certificate provisioning
• You have experience with Kubernetes, container orchestration, and Infrastructure-as-Code paradigms
• You are aware of post-quantum cryptography (PQC) standards, such as Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM), and crypto-agility design principles
• You are familiar with designing or operating multi-tenant policy engines and hierarchical authorization graphs