Staff Systems Engineer - PKI

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including Vimeo, Pinterest, The New York Times, and GitHub.

We're building a more trustworthy Internet. Come join us.

Please note: You MUST CURRENTLY reside within a commutable distance to San Francisco to be considered for this position

As a PKI Systems Engineer, you will help build and operate Certainly, Fastly’s publicly-trusted TLS certification authority. Working with cryptosystem specialists, along with site reliability engineers and others, you will implement systems to meet security objectives, reliability goals, and compliance requirements. Certainly delivers widely trusted, short validity period TLS certificates at scale to Fastly customers.

We are looking for a versatile engineer who enjoys being deeply involved in all aspects of building and operating our infrastructure. Someone who will excel at improving our technology systems and processes, and will show an aptitude for solving complex issues.

This is a role with a small and supportive team. In addition to contributing to industry-leading security products and services, you’ll make sure our customers benefit from a service built to the highest security standards. We’re a geographically distributed remote team, and while hybrid work from a Fastly office is our standard, we also embrace remote work.

What You'll Do:

• Deploy and manage a highly secure, distributed, fault tolerant Public Key Infrastructure (PKI)
• Work in partnership with our SRE, security, and product engineering teams to operate secure Fastly infrastructure (network, systems, applications, and business processes)
• Integrate open-source and licensed software into a modern system that emphasizes automation and resilience
• Design and evolve the environment and processes to exceed security, compliance, availability, and maintainability goals
• Work across the organization to meet compliance requirements

What We're Looking For: 

• Proven experience implementing and maintaining distributed systems on Linux, including automated configuration and deployment, and continuous monitoring and alerting
• Experience operating and scaling systems built on ephemeral, containerized microservices
• Experience with applied cryptography and tools like OpenSSL, CFSSL, or LibreSSL, and understanding of PKI architecture and standards such as RFC 5280
• Experience building and maintaining highly secure Linux environments, including system hardening, vulnerability detection and remediation, monitoring/alerting, and intrusion prevention and detection
• Experience with Hardware Security Module (HSM) configuration and operation
• Solid verbal and written communications skills

We’ll be super impressed if you have experience in any of these: 

• Experience with microservices, protocols like gRPC, bash scripting, debugging Go and Python, and also technologies in our tech stack is preferred: Linux, Docker, Hashicorp Vault, Chef, Splunk
• RDBMS administration (e.g. MySQL, MariaDB) experience in a high-availability production environment
• Comfortable working in a highly regulated environment (e.g. WebTrust, PCI)
• Experience operating a large-scale PKI

Work Hours: This position will require you to be available during core business hours.

Work Location(s) & Travel Requirements: 

This position is open to candidates residing in the following preferred office locations: 

• San Francisco, CA
• Los Angeles, CA
• Denver, CO
• New York, NY 

This position may require travel as required by your role or requested by your manager. 

Salary: 

The estimated salary range for this position is $195,720 to $244,640.

Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills, qualifications, and location.

This role may be eligible to participate in Fastly’s equity and discretionary bonus programs.

Benefits:

We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on