Staff Systems Engineer - PKI

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including Vimeo, Pinterest, The New York Times, and GitHub.

We're building a more trustworthy Internet. Come join us.

Please note: we are NOT considering candidates who do not CURRENTLY reside within a commutable distance from Los Angeles for this position. No relocation

As a PKI Systems Engineer, you will help build and operate Certainly, Fastly’s publicly-trusted TLS certification authority. Working with a small dedicated team, along with site reliability engineers and others, you will operate complex PKI systems to meet security objectives, reliability goals, and compliance requirements. Certainly delivers widely trusted, short validity TLS certificates at scale to Fastly customers, helping to secure the internet.

Certainly is built on open-source. This team is responsible for understanding, configuring, maintaining, and enhancing the application and for building supporting infrastructure, logical and physical security, and compliance with strict industry standards.

We are looking for a versatile engineer with a software development background who enjoys being deeply involved in all aspects of building and operating our infrastructure. Someone who will excel at improving our technology systems and processes, and will show an aptitude for solving complex issues.

What You'll Do:

• Deploy and manage a highly secure, distributed, fault tolerant Public Key Infrastructure (PKI)
• Work in partnership with our SRE, network, security, product engineering, and data center teams to operate secure Fastly infrastructure (network, systems, applications, hardware, and processes)
• Integrate open-source and licensed software into a modern architecture that emphasizes security, automation and resilience
• Design and evolve the environment and processes to exceed security, compliance, availability, and maintainability goals
• Solve challenging large scale engineering problems

What We're Looking For: 

• You have a minimum of 6 years of experience with systems engineering with at least 3 of those years focused on software development
• You have 6 years of experience implementing and maintaining distributed systems on Linux, including automated configuration and deployment, and continuous monitoring and alerting
• Experience operating and scaling systems built on ephemeral, containerized microservices
• Experience building and maintaining highly secure Linux environments, including system hardening, vulnerability detection and remediation, monitoring/alerting, and intrusion prevention and detection
• Experience with applied cryptography and tools like OpenSSL, CFSSL, or LibreSSL, and understanding of PKI architecture and standards such as RFC 5280 and RFC 8555 (ACME)

We’ll be super impressed if you have experience in any of these: 

• Experience with Hardware Security Module (HSM) configuration and operation
• Experience running  microservices written in Go over  gRPC
• Technologies in our stack: Docker, Hashicorp Vault, Chef, Splunk, Terraform
• RDBMS administration (e.g. MySQL, MariaDB) experience in a high-availability production environment
• Background working in a highly regulated environment (e.g. WebTrust, PCI)
• Experience operating a large-scale PKI

Work Hours: This position will require you to be available during core business hours.

Work Location(s) & Travel Requirements: 

This position is open to the following preferred office locations:

• Denver, CO
• San Francisco, CA
• Los Angeles, CA
• New York City, NY

Fastly currently embraces a largely hybrid model for most roles which allows employees flexibility to split their time between the office and home. 

Salary:

The estimated salary range for this position is $181,220 to $226,520. 

Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills, qualifications, and location.

This role may be eligible to participate in Fastly’s equity and discretionary bonus programs.

Benefits: 

We care about you. Fastly works hard to create a positive environment for our employees, and