Senior Software Engineer, PKI & Cryptographic Systems (Cryptography)

Location: Hybrid in Austin, London, or Lisbon

Salary: €66,000–€83,000 annual salary for Portugal-based hires

Company

hirify.global operates a global network that protects and accelerates Internet applications and provides infrastructure used by millions of websites and Internet properties.

What you will do

• Design and build PKI systems for certificate lifecycle management, X.509 issuance and validation, key-parameter enforcement, and policy management.
• Integrate FIPS-validated hardware security modules through PKCS#11 and vendor SDKs, and develop key-ceremony and key-lifecycle tooling.
• Build ACME issuance and renewal pipelines, short-lived certificate rotation, revocation mechanisms, and Certificate Transparency integrations at global scale.
• Develop tamper-evident audit logging, evidence pipelines, observability, runbooks, and incident-response practices.
• Maintain CA/Browser Forum, WebTrust, and root-store compliance while contributing to incident reports and WebPKI community discussions.
• Partner with SSL/TLS, infrastructure, research, and product teams; mentor engineers and establish secure-development standards.

Requirements

• 5+ years of production systems software experience with a strong operational track record.
• Deep knowledge of applied cryptography and PKI, including X.509, ASN.1/DER, RFC 5280, Certificate Transparency, ACME, and CA/Browser Forum requirements.
• Experience with HSMs, PKCS#11, key ceremonies, key-attestation flows, and FIPS 140-2/3 validation.
• Strong systems programming skills in at least one of Go, Rust, or C/C++.
• Experience operating globally replicated, availability-critical distributed systems and high-integrity database schemas such as Postgres.
• Understanding of threat modelling, defence in depth, least privilege, secure key handling, and high-consequence production operations.

Nice to have

• Experience with a publicly trusted or private CA, large-scale internal PKI, or PKI codebases such as Boulder, BoringSSL, OpenSSL, CFSSL, or Vault PKI.
• Experience with WebTrust audits, Certificate Transparency infrastructure, offline key ceremonies, or CA/Browser Forum and IETF working groups.
• Knowledge of post-quantum cryptography, including ML-DSA, ML-KEM, and hybrid signature schemes.
• Experience with formal methods, differential fuzzing, property-based testing, or Kubernetes.

Culture & Benefits

• Work on an early-stage team shaping hirify.global’s certificate and cryptographic infrastructure.
• Employee benefits include medical, dental, vision, flexible spending, family-forming, and mental-health support programs.
• Benefits include global travel medical insurance, disability and life insurance, retirement savings, and employee stock participation.
• Flexible paid time off and parental, pregnancy health, medical, and bereavement leave are available.
• The role is eligible for hirify.global’s equity plan.

Hiring process

• Candidates progressing to the offer stage may be asked to attend an in-person interview at a hirify.global office or hub.
• The position may involve access to technology subject to U.S. export-control laws; an offer may depend on authorization to receive controlled technology without export-license sponsorship.