Staff Systems Engineer - PKI

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including Vimeo, Pinterest, The New York Times, and GitHub.

We're building a more trustworthy Internet. Come join us.

Posting Open Date: 5/29/24

Anticipated Posting Close Date*: 7/29/24

*Job posting may close early due to the volume of applicants.

Staff Systems Engineer - PKI 

As a PKI Systems Engineer, you will help build and operate Certainly, Fastly’s publicly-trusted TLS certification authority. Working with a small dedicated team, along with site reliability engineers and others, you will operate complex PKI systems to meet security objectives, reliability goals, and compliance requirements. Certainly delivers widely trusted, short validity TLS certificates at scale to Fastly customers, helping to secure the internet.

Certainly is built on open-source. This team is responsible for understanding, configuring, maintaining, and enhancing the application and for building supporting infrastructure, logical and physical security, and compliance with strict industry standards.

We are looking for a versatile engineer with a software development background who enjoys being deeply involved in all aspects of building and operating our infrastructure. Someone who will excel at improving our technology systems and processes, and will show an aptitude for solving complex issues.

What You'll Do:

• Deploy and manage a highly secure, distributed, fault tolerant Public Key Infrastructure (PKI)
• Work in partnership with our SRE, network, security, product engineering, and data center teams to operate secure Fastly infrastructure (network, systems, applications, hardware, and processes)
• Integrate open-source and licensed software into a modern architecture that emphasizes security, automation and resilience
• Design and evolve the environment and processes to exceed security, compliance, availability, and maintainability goals
• Solve challenging large scale engineering problems

What We're Looking For: 

• You have a minimum of 6 years of experience with systems engineering with at least 3 of those years focused on software development
• You have 6 years of experience implementing and maintaining distributed systems on Linux, including automated configuration and deployment, and continuous monitoring and alerting
• Experience operating and scaling systems built on ephemeral, containerized microservices
• Experience building and maintaining highly secure Linux environments, including system hardening, vulnerability detection and remediation, monitoring/alerting, and intrusion prevention and detection
• Experience with applied cryptography and tools like OpenSSL, CFSSL, or LibreSSL, and understanding of PKI architecture and standards such as RFC 5280 and RFC 8555 (ACME)

We’ll be super impressed if you have experience in any of these: 

• Experience with Hardware Security Module (HSM) configuration and operation
• Experience running  microservices written in Go over  gRPC
• Technologies in our stack: Docker, Hashicorp Vault, Chef, Splunk, Terraform
• RDBMS administration (e.g. MySQL, MariaDB) experience in a high-availability production environment
• Background working in a highly regulated environment (e.g. WebTrust, PCI)
• Experience operating a large-scale PKI

Work Hours:

• This position will require you to be available during core business hours.

Work Locations & Travel Requirements: 

This position is open to the following preferred office locations:

• Denver, CO
• San Francisco, CA
• Los Angeles, CA
• New York City, NY

Fastly currently embraces a largely hybrid model for most roles which allows employees flexibility to split their time between the office and home. 

This position may require travel as required by your role or requested by your manager.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Salary:

The estimated sa