Staff Systems Engineer - PKI

Posting Open Date: 5/29/24

Anticipated Posting Close Date*: 7/29/24

• Job posting may close early due to the volume of applicants.

Staff Systems Engineer - PKI

As a PKI Systems Engineer, you will help build and operate Certainly, Fastly's publicly-trusted TLS certification authority. Working with a small dedicated team, along with site reliability engineers and others, you will operate complex PKI systems to meet security objectives, reliability goals, and compliance requirements. Certainly delivers widely trusted, short validity TLS certificates at scale to Fastly customers, helping to secure the internet.

Certainly is built on open-source. This team is responsible for understanding, configuring, maintaining, and enhancing the application and for building supporting infrastructure, logical and physical security, and compliance with strict industry standards.

We are looking for a versatile engineer with a software development background who enjoys being deeply involved in all aspects of building and operating our infrastructure. Someone who will excel at improving our technology systems and processes, and will show an aptitude for solving complex issues.

What You'll Do:

• Deploy and manage a highly secure, distributed, fault tolerant Public Key Infrastructure (PKI)

• Work in partnership with our SRE, network, security, product engineering, and data center teams to operate secure Fastly infrastructure (network, systems, applications, hardware, and processes)

• Integrate open-source and licensed software into a modern architecture that emphasizes security, automation and resilience

• Design and evolve the environment and processes to exceed security, compliance, availability, and maintainability goals

• Solve challenging large scale engineering problems

What We're Looking For:

• You have a minimum of 6 years of experience with systems engineering with at least 3 of those years focused on software development

• You have 6 years of experience implementing and maintaining distributed systems on Linux, including automated configuration and deployment, and continuous monitoring and alerting

• Experience operating and scaling systems built on ephemeral, containerized microservices

• Experience building and maintaining highly secure Linux environments, including system hardening, vulnerability detection and remediation, monitoring/alerting, and intrusion prevention and detection

• Experience with applied cryptography and tools like OpenSSL, CFSSL, or LibreSSL, and understanding of PKI architecture and standards such as RFC 5280 and RFC 8555 (ACME)

We'll be super impressed if you have experience in any of these:

• Experience with Hardware Security Module (HSM) configuration and operation

• Experience running microservices written in Go over gRPC

• Technologies in our stack: Docker, Hashicorp Vault, Chef, Splunk, Terraform

• RDBMS administration (e.g. MySQL, MariaDB) experience in a high-availability production environment

• Background working in a highly regulated environment (e.g. WebTrust, PCI)

• Experience operating a large-scale PKI

Work Hours:

• This position will require you to be available during core business hours.

Work Locations & Travel Requirements:

This position is open to the following preferred office locations:

• Denver, CO
• San Francisco, CA
• New York City, NY

Fastly currently embraces a largely hybrid model for most roles which allows employees flexibility to split their time between the office and home.

This position may require travel as required by your role or requested by your manager.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Salary:

The estimated salary range for this position is $163,100 to $226,520.

Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills, qualifications, and location.

This role may be eligible to participate in Fastly's equity and discretionary bonus programs.

Benefits

We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with Fastly. Curious about our offerings?

We offer a comprehensive benefits package including medical, dental, and vision insurance. Family planning, mental health support along with Employee Assistance Program, Insurance (Life, Disability, and Accident), a Flexible Vacation policy and up to 18 days of accrued paid sick leave are there to help support our employees. We also offer 401(k) (including company match) and an Employee Stock Purchase Program. For 2024, we offer 10 paid local holidays, 11 paid company wellness days.