- Remote, United States
- Remote
- Full-time · Staff
- $210K–$270K per year
- 10+ years
Lead technical standards for machine identity, secrets, and PKI, including certificate authority design, post-quantum planning, and automating non-human identity management.
Compensation
$210,000—$270,000 USD
Responsibilities
- Build the non-human identity register covering cloud service accounts, CI credentials, API keys, tokens, and certificates
- Replace static, long-lived credentials with short-lived workload identity using GitHub Actions OIDC, cloud workload identity federation, Kubernetes service account tokens, and SPIFFE/SPIRE
- Own Nscale's PKI and lead implementation of a certificate lifecycle management platform
- Automate issuance and renewal using ACME, cert-manager, and EST/SCEP
- Implement device certificates for managed endpoints
Requirements
- Nice to have: Keyfactor
- Nice to have: Entrust
- Nice to have: AppViewX
- Nice to have: DigiCert
- Nice to have: GCP workload identity