Home / Principal Engineer – Cryptography – cajobstoday.janhitjobs

Principal Engineer – Cryptography

Job Description:

  • Participate in IETF standards bodies and TLS/SSL working groups representing GoDaddy
  • Assess CA infrastructure to identify architectural gaps, security vulnerabilities, and performance bottlenecks
  • Define requirements for certificate issuance pipelines, HSM integrations, and cryptographic key management systems
  • Specify automated compliance testing frameworks, CT log integration, OCSP responder infrastructure, and revocation mechanisms
  • Develop automation scripts for compliance testing and validation
  • Define SLIs/SLOs for certificate issuance latency, system availability, and compliance metrics
  • Document infrastructure-as-code requirements for CA deployment, disaster recovery, and high-availability architectures
  • Research requirements for post-quantum algorithms and hybrid certificate chains
  • Develop migration strategies from legacy cryptographic systems to next-generation algorithms
  • Create technical specifications for emerging standards including ACME extensions, Certificate Transparency v2, and delegated credentials
  • Collaborate with cryptography researchers on algorithm performance, key sizes, and implementation trade-offs
  • Define the roadmap for CA platform capabilities, certificate lifecycle automation, API development, and integration frameworks
  • Specify scalable APIs and automation tools for certificate issuance, renewal, and revocation
  • Document self-service platforms and tools to reduce manual certificate operations
  • Develop automated testing and continuous compliance monitoring with remediation capabilities
  • Partner with security engineering teams on threat modeling, secure coding, and vulnerability management
  • Lead architecture reviews and technical design sessions with cross-functional engineering teams
  • Establish technical documentation and compliance engineering standards
  • Mentor engineers on PKI, cryptographic implementations, and compliance engineering patterns
  • Report to GoDaddy’s Vice President Engineering Partners

Requirements:

  • 8+ years of hands-on engineering experience in PKI systems, applied cryptography, or security infrastructure
  • Proven technical leadership
  • Strong technical background in Go, Python, Java, or C++
  • Deep expertise in PKI architecture, including X.509 certificate structures, ASN.1 encoding, certificate chain validation, HSM operations, and cryptographic primitives
  • Experience translating CA/Browser Forum Baseline Requirements into technical specifications
  • Experience with distributed systems, API design, database architecture, and cloud infrastructure (AWS/GCP/Azure)
  • Ability to define requirements for PKI protocols including ACME, Certificate Transparency, OCSP/CRL
  • Ability to translate compliance requirements into technical specifications, engineering requirements, and test automation scripts
  • Advanced degree in Computer Science, Cryptography, Mathematics, or Electrical Engineering
  • Experience researching and evaluating post-quantum cryptographic algorithms
  • Security certifications such as CISSP, CEH, or specialized cryptography credentials
  • Experience with security audit processes including WebTrust for CAs and ETSI EN 319 411
  • Contributions to PKI-related projects such as Boulder, cert-manager, OpenSSL, or BoringSSL
  • Experience defining requirements for high-availability systems, HSMs, and secure key ceremony procedures
  • Knowledge of DevSecOps, CI/CD pipelines, and infrastructure automation using Terraform, Kubernetes, or Ansible
  • Familiarity with OpenSSL, BoringSSL, and PKCS#11
  • Experience developing test automation scripts for compliance validation

Benefits:

  • Competitive pay
  • Generous time off
  • Parental and wellness leave
  • Healthcare
  • Retirement savings program
  • Medical, dental, and vision insurance
  • 401(k) retirement plan
  • Paid sick time
  • Paid flexible time off
  • Paid parental leave
  • Life insurance
  • Short- and long-term disability
  • AD&D insurance
  • Mental health or EAP programs
  • Remote or hybrid work options
  • Paid holidays
  • Paid Wellness days
  • Tuition assistance
  • Adoption, surrogacy, and fertility benefits
  • Dependent daycare and backup care benefits
  • Employee stock purchase plan
  • Financial education and advice
  • Corporate bonus and/or equity awards may be available
Share Share
Apply Now →