- Senior
- $210K–$270K per year
- 10+ years
Lead machine identity and PKI engineering for Nscale’s AI infrastructure, setting standards, designing CA hierarchies, and automating certificate lifecycle across cloud and on-prem environments.
Compensation
$210,000—$270,000 USD
Responsibilities
- Build the non-human identity register for cloud service accounts, CI credentials, API keys, tokens, certificates and agent identities
- Replace static, long-lived credentials with short-lived workload identity using GitHub Actions OIDC, cloud workload identity federation, Kubernetes service account tokens, and SPIFFE/SPIRE
- Own Nscale's PKI and lead implementation of a certificate lifecycle management platform
- Automate issuance and renewal using ACME, cert-manager and EST/SCEP, and implement device certificates for managed endpoints
- Set the machine secrets standard and partner with SRE on how workloads authenticate to Vault
Requirements
- Nice to have: GCP workload identity