S
SalesforceCalifornia - San Francisco, United States of America {{REMOTE}}
Lead Software Engineer (PKI & Cryptographic Trust Services)
On-siteFull Time$172.5k - $285.8k per yearPosted 3 days ago
About the role
- Salesforce Data Security is seeking a Lead Software Engineer to architect, build, and scale our unified certificate Registration Authority (RA), the front door for cryptographic trust across our global multi-cloud platform
- This foundational trust layer authenticates and authorizes millions of certificate issuance requests daily, securing machine-to-machine communication, workload identity, and data-in-transit for the world’s most trusted enterprise cloud
- You lead the technical design and delivery of a highly concurrent, multi-substrate Go codebase, stay deep in the code while mentoring senior engineers, and drive architectural consensus across a distributed system where availability and security are non-negotiable
- This is an AI-first engineering team: you use advanced AI coding assistants, prompt engineering, and shared-system-context tools daily to accelerate your workflows, review code, and generate comprehensive tests, setting the standard for AI-augmented software development
- Architect, build, and maintain the unified Registration Authority (RA) that serves as the single certificate-issuance front door for a global, multi-cloud platform
- Design and optimize highly concurrent, multi-substrate build paths in Go, ensuring seamless deployment across diverse public-cloud environments
- Develop and scale both synchronous and asynchronous certificate issuance paths using robust distributed state-machine orchestration
- Implement strictly evaluated hierarchical policy engines and authorization controls to validate substrate-specific workload identity and attestation
- Drive robust certificate lifecycle management and automation by integrating with and abstracting multiple public and private Certificate Authorities (CAs)
- Lead the team’s engineering excellence by writing resilient, observable, and strictly tested code capable of surviving underlying infrastructure degradation
- Instrument comprehensive telemetry, distributed tracing, and alerting to maintain stringent availability and performance service level agreements (SLAs)
- Act as a technical multiplier, mentoring engineers, conducting rigorous code reviews, and raising the bar for distributed systems design
- Partner with Security Architecture to translate complex compliance requirements into automated, scalable software controls
- Respond to and resolve complex distributed systems escalations, identifying root causes and deploying durable architectural fixes
- Elevate team productivity by establishing best practices for AI-augmented software development and prompt engineering
- Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow, pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code
- Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale
- Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably, and critically evaluate code (human- or AI-generated) for correctness, quality, security, and performance Benefits
- Medical Care
- Life Insurance
- Retirement Savings
- Employee Assistance Programs
- With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year
- You have a strong background in observability (telemetry, distributed tracing, metrics) and modern continuous integration/continuous delivery (CI/CD) deployment pipelines
- You have 9+ years of professional software development experience, with a proven track record of designing and operating large-scale distributed systems
- You can design resilient Representational State Transfer (RESTful) and gRPC web services, backed by robust distributed state machines and asynchronous processing pipelines
- You have a demonstrated, genuine AI-first approach to engineering, using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty
- You have advanced prompt engineering skills and the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production-ready
- You are proficient with AI coding assistants and shared-context workflows that enhance engineering velocity
- You have deep, production-grade expertise in Go (Golang), Java, or Rust, including advanced concurrency patterns, memory management, and multi-substrate build configurations
- You have experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor, etc.) in development workflows
- You have extensive experience deploying and operating highly available, mission-critical services across public cloud providers such as Amazon Web Services (AWS) and Google Cloud Platform (GCP)
- You have a Bachelor’s degree in Computer Science, Engineering, or a relat