Principal Engineer – Cryptography

🔥 0 minutes ago

🏄 California, Hawaii, +6 more states – Remote

🏄 California – Remote 🌺 Hawaii – Remote 🌽 Illinois – Remote 🗻 New Hampshire – Remote 🌲 Oregon – Remote 🍂 Massachusetts – Remote ⚔️ Virginia – Remote ☕ Washington – Remote

💵 $165.5k - $248.5k / year

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

GoDaddy

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1997

💼 Consulting

📣 Marketing

☁️ SaaS

💰 $800M Post-IPO Equity on 2021-12

Consulting • Marketing • SaaS

GoDaddy is a web services company that provides domain registration, web hosting, website builder tools, and online marketing solutions to individuals and small-to-medium businesses. It offers software-as-a-service products that simplify creating and managing websites, email, e-commerce stores, and online presence. The platform serves both consumer and business customers and supports third-party site content and customer sites hosted on its infrastructure.

📋 Description

• Participate in IETF standards bodies and TLS/SSL working groups representing GoDaddy • Assess CA infrastructure to identify architectural gaps, security vulnerabilities, and performance bottlenecks • Define requirements for certificate issuance pipelines, HSM integrations, and cryptographic key management systems • Specify automated compliance testing frameworks, CT log integration, OCSP responder infrastructure, and revocation mechanisms • Develop automation scripts for compliance testing and validation • Define SLIs/SLOs for certificate issuance latency, system availability, and compliance metrics • Document infrastructure-as-code requirements for CA deployment, disaster recovery, and high-availability architectures • Research requirements for post-quantum algorithms and hybrid certificate chains • Develop migration strategies from legacy cryptographic systems to next-generation algorithms • Create technical specifications for emerging standards including ACME extensions, Certificate Transparency v2, and delegated credentials • Collaborate with cryptography researchers on algorithm performance, key sizes, and implementation trade-offs • Define the roadmap for CA platform capabilities, certificate lifecycle automation, API development, and integration frameworks • Specify scalable APIs and automation tools for certificate issuance, renewal, and revocation • Document self-service platforms and tools to reduce manual certificate operations • Develop automated testing and continuous compliance monitoring with remediation capabilities • Partner with security engineering teams on threat modeling, secure coding, and vulnerability management • Lead architecture reviews and technical design sessions with cross-functional engineering teams • Establish technical documentation and compliance engineering standards • Mentor engineers on PKI, cryptographic implementations, and compliance engineering patterns • Report to GoDaddy’s Vice President Engineering Partners

🎯 Requirements

• 8+ years of hands-on engineering experience in PKI systems, applied cryptography, or security infrastructure • Proven technical leadership • Strong technical background in Go, Python, Java, or C++ • Deep expertise in PKI architecture, including X.509 certificate structures, ASN.1 encoding, certificate chain validation, HSM operations, and cryptographic primitives • Experience translating CA/Browser Forum Baseline Requirements into technical specifications • Experience with distributed systems, API design, database architecture, and cloud infrastructure (AWS/GCP/Azure) • Ability to define requirements for PKI protocols including ACME, Certificate Transparency, OCSP/CRL • Ability to translate compliance requirements into technical specifications, engineering requirements, and test automation scripts • Advanced degree in Computer Science, Cryptography, Mathematics, or Electrical Engineering • Experience researching and evaluating post-quantum cryptographic algorithms • Security certifications such as CISSP, CEH, or specialized cryptography credentials • Experience with security audit processes including WebTrust for CAs and ETSI EN 319 411 • Contributions to PKI-related projects such as Boulder, cert-manager, OpenSSL, or BoringSSL • Experience defining requirements for high-availability systems, HSMs, and secure key ceremony procedures • Knowledge of DevSecOps, CI/CD pipelines, and infrastructure automation using Terraform, Kubernetes, or Ansible • Familiarity with OpenSSL, BoringSSL, and PKCS#11 • Experience developing test automation scripts for compliance validation

🏖️ Benefits

• Competitive pay • Generous time off • Parental and wellness leave • Healthcare • Retirement savings program • Medical, dental, and vision insurance • 401(k) retirement plan • Paid sick time • Paid flexible time off • Paid parental leave • Life insurance • Short- and long-term disability • AD&D insurance • Mental health or EAP programs • Remote or hybrid work options • Paid holidays • Paid Wellness days • Tuition assistance • Adoption, surrogacy, and fertility benefits • Dependent daycare and backup care benefits • Employee stock purchase plan • Financial education and advice • Corporate bonus and/or equity awards may be available

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume