JR354749 Lead Software Engineer, PKI & Cryptographic Trust Services

As a Lead Software Engineer for PKI and Cryptographic Trust Services at Salesforce, you architect, build, and scale the unified certificate Registration Authority (RA) that serves as the single certificate-issuance front door for Salesforce's global, multi-cloud platform. This foundational trust layer authenticates and authorizes millions of certificate issuance requests daily, securing machine-to-machine communication, workload identity, and data-in-transit. You lead the technical design and delivery of a highly concurrent, multi-substrate Go codebase, stay deep in the code while mentoring senior engineers, and drive architectural consensus across a distributed system where availability and security are non-negotiable. You work in an AI-first engineering team, using advanced AI coding assistants, prompt engineering, and shared-system-context tools daily to accelerate your workflows.

What you'll do

• Architect, build, and maintain the unified Registration Authority (RA) that serves as the single certificate-issuance front door for a global, multi-cloud platform
• Design and optimize highly concurrent, multi-substrate build paths in Go, ensuring seamless deployment across diverse public-cloud environments
• Develop and scale both synchronous and asynchronous certificate issuance paths using robust distributed state-machine orchestration
• Implement strictly evaluated hierarchical policy engines and authorization controls to validate substrate-specific workload identity and attestation
• Drive robust certificate lifecycle management and automation by integrating with and abstracting multiple public and private Certificate Authorities (CAs)
• Lead the team's engineering excellence by writing resilient, observable, and strictly tested code capable of surviving underlying infrastructure degradation
• Instrument comprehensive telemetry, distributed tracing, and alerting to maintain stringent availability and performance service level agreements (SLAs)
• Mentor engineers, conduct rigorous code reviews, and raise the bar for distributed systems design
• Partner with Security Architecture to translate complex compliance requirements into automated, scalable software controls
• Respond to and resolve complex distributed systems escalations, identifying root causes and deploying durable architectural fixes
• Establish best practices for AI-augmented software development and prompt engineering across the team
• Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow
• Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale
• Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably

What you bring

• 9+ years of professional software development experience with a proven track record of designing and operating large-scale distributed systems
• Deep, production-grade expertise in Go (Golang), Java, or Rust, including advanced concurrency patterns, memory management, and multi-substrate build configurations
• Extensive experience deploying and operating highly available, mission-critical services across public cloud providers such as Amazon Web Services (AWS) and Google Cloud Platform (GCP)
• The ability to design resilient Representational State Transfer (RESTful) and gRPC web services, backed by robust distributed state machines and asynchronous processing pipelines
• A strong background in observability (telemetry, distributed tracing, metrics) and modern continuous integration/continuous delivery (CI/CD) deployment pipelines
• Proficiency with AI coding assistants and shared-context workflows that enhance engineering velocity
• A demonstrated, genuine AI-first approach to engineering, using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty
• Experience using AI tools such as Claude Code, GitHub Copilot, Codex, or Cursor in development workflows
• Advanced prompt engineering skills and the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production-ready
• A Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience

Nice to have

• Deep domain knowledge of Public Key Infrastructure (PKI), X.509 certificate profiles, and mutual Transport Layer Security (mTLS) architectures
• A strong understanding of certificate lifecycle management and automated certificate provisioning
• Awareness of post-quantum cryptography (PQC) standards, such as Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM), and crypto-agility design principles
• Experience with Kubernetes, container orchestration, and Infrastructure-as-Code paradigms
• Familiarity with designing or operating multi-tenant policy engines and hierarchical authorization graphs

What we offer

• Base salary of $172,500-$260,100 annually, or $207,800-$285,800 annually in select cities within the San Francisco and New York City metropolitan areas
• Company bonus and incentive compensation for eligible roles
• Equity
• Time off programs
• Medical, dental, and vision coverage
• Mental health support
• Paid parental leave
• Life and disability insurance
• 401(k) and employee stock purchasing program

About Salesforce

Salesforce is the number-one AI CRM where humans with agents drive customer success together. The company builds innovative, trusted enterprise cloud solutions for organizations worldwide, advancing workforce transformation in the agentic era.