Senior Certificate Authority Architect

Hybrid. Posted a month ago

The role

This person will define and guide the end-to-end architecture of a new public Certificate Authority. The role involves designing systems for certificate issuance, key management, and post-quantum authentication.

What you will do

Define and maintain the end-to-end technical architecture of the public CA.
Design root and intermediate CA trust hierarchies and signing systems.
Architect secure, resilient, and highly available issuance services.
Design certificate lifecycle systems around ACME, validation, and revocation.
Integrate MTC infrastructure including CA logs and landmarks.
Develop architectures for migration between X.509 and post-quantum mechanisms.
Define trust boundaries, security properties, and threat models.
Design systems for observability through transparency mechanisms and audit controls.
Design failure containment and recovery mechanisms.
Translate CA/Browser Forum and browser root-program requirements into technical controls.

Required qualifications

Substantial experience designing or operating security-critical systems.
Deep expertise in at least one of: public Certificate Authorities, Web PKI, applied cryptography, TLS and Internet security protocols, Certificate Transparency, hardware-backed key management, or larg
Strong knowledge of certificate trust chains, issuance and validation, revocation, and key lifecycle management.
Experience defining system trust boundaries, threat models, security invariants, and failure-handling strategies.
Ability to reason about systems where architectural mistakes can affect a significant fraction of the Internet.
Experience leading architecture across multiple engineering teams without relying solely on organizational authority.
Strong written and verbal communication.
Comfort operating with substantial autonomy in an evolving technical and policy environment.

About the company

Cloudflare runs one of the world’s largest networks that powers millions of websites and other Internet properties. The company is on a mission to help build a better Internet.