Staff Systems Engineer - PKI - job 1 of 2

As a PKI Systems Engineer, you will help build and operate Certainly, Fastly's publicly-trusted TLS certification authority. Working with PKI specialists, along with site reliability engineers and others, you will implement systems to meet security objectives, reliability goals, and compliance requirements. Certainly delivers widely trusted, short validity TLS certificates at scale to Fastly customers, helping to secure the internet.

Certainly is built on open-source. This team is responsible for building, configuring, maintaining, and enhancing the application and related infrastructure, logical and physical security, and compliance with strict industry standards.

We are looking for a versatile engineer with a security mindset who enjoys being deeply involved in all aspects of building and operating our infrastructure. Someone who will excel at improving our technology systems and processes, and will show an aptitude for solving complex issues.

What You'll Do:

• Deploy and manage a highly secure, distributed, fault tolerant Public Key Infrastructure (PKI)
• Work in partnership with our SRE, security, and product engineering teams to operate secure Fastly infrastructure (network, systems, applications, and processes)
• Integrate open-source and licensed software into a modern system that emphasizes automation and resilience
• Design and evolve the environment and processes to exceed security, compliance, availability, and maintainability goals
• Work across the organization to meet compliance requirements

What We're Looking For:

• You have a minimum of 6 years of experience with systems engineering with at least 3 of those years focused on PKI or security
• You have 6 years of experience implementing and maintaining distributed systems on Linux, including automated configuration and deployment, and continuous monitoring and alerting
• Experience operating and scaling systems built on ephemeral, containerized microservices
• Experience with applied cryptography and tools like OpenSSL, CFSSL, or LibreSSL, and understanding of PKI architecture and standards such as RFC 5280
• Experience building and maintaining highly secure Linux environments, including system hardening, vulnerability detection and remediation, monitoring/alerting, and intrusion prevention and detection
• Experience with Hardware Security Module (HSM) configuration and operation

We'll be super impressed if you have experience in any of these:

• Experience with microservices, protocols like gRPC, bash scripting, debugging Go and Python, and also technologies in our tech stack: Linux, Docker, Hashicorp Vault, Chef, Splunk
• RDBMS administration (e.g. MySQL, MariaDB) experience in a high-availability production environment
• Comfortable working in a highly regulated environment (e.g. WebTrust, PCI)
• Experience operating a large-scale PKI

Work Hours: This position will require you to be available during core business hours.This position may require travel as required by your role or requested by your manager.

Salary:

The estimated salary range for this position is $195,720 to $244,640.

Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills, qualifications, and location.

This role may be eligible to participate in Fastly's equity and discretionary bonus programs.

Benefits:

We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with Fastly. Curious about our offerings?

• We offer a comprehensive benefits package including medical, dental, and vision insurance. Family planning, mental health support along with Employee Assistance Program, Insurance (Life, Disability, and Accident), an open vacation policy and up to 18 days of accrued paid sick leave are there to help support our employees. We also offer 401(k) (including company match) and an Employee Stock Purchase Program. For 2023, we offer 10 paid local holidays, 11 paid company wellness days.