Principal Product Manager, Certificate Authority

The role

You will define the product strategy, roadmap, customer experience, and commercial model for Cloudflare's new Certificate Authority business. You will work across multiple teams to build a public, redundant, and transparent CA. This role involves zero-to-one product building for high-consequence infrastructure.

What you will do

• Define product strategy for CA business including automation, ACME issuance, and renewal workflows
• Understand needs of developers, site owners, and enterprise security teams
• Design product requirements for resilience and automated recovery
• Drive an ACME-first customer experience
• Partner with engineering on certificate lifecycles, HSM integration, and key protection
• Partner with compliance, legal, security, and operations for CA/Browser Forum and WebTrust alignment
• Own go-to-market strategy including pricing, packaging, and sales enablement
• Represent the customer and ecosystem in product decisions
• Work across Cloudflare product teams like SSL/TLS, Zero Trust, and DNS
• Ensure Cloudflare acts as Customer Zero for the CA product

Required qualifications

• 10+ years of product management experience building technical products for developers, security teams, infrastructure teams, enterprises, or cloud platforms
• Experience with security, identity, infrastructure, or developer platform products
• Working knowledge of PKI and certificate lifecycle management including TLS certificates, X.509, ACME, public and private CAs, revocation, Certificate Transparency, mTLS, HSMs, and enterprise certific
• Strong business judgment with experience defining product strategy, pricing and packaging, customer segmentation, and go-to-market plans for technical B2B products
• Ability to operate in ambiguity and create structure around a new business
• Technical fluency with engineering teams regarding APIs, distributed systems, and security tradeoffs
• Strong written communication for strategy documents and product requirements
• Comfort with high-consequence work

Nice to have

• Direct experience working on certificate authority, PKI, certificate lifecycle management, cloud security, identity, or trust services products
• Experience with publicly trusted CAs, private PKI, managed certificate services, or platforms such as AWS Certificate Manager, AWS Private CA, Google Trust Services, DigiCert, Sectigo, Let's Encrypt /
• Familiarity with CA/Browser Forum requirements, browser root programs, WebTrust for CAs, WebTrust Baseline Requirements, or public CA incident reporting
• Experience building API-first developer products involving ACME, SDKs, CLI workflows, Kubernetes, service mesh, mTLS, or infrastructure-as-code integrations
• Experience launching new businesses or zero-to-one products inside a larger platform company
• Familiarity with certificate automation challenges created by 90-day and shorter certificate lifetimes
• Familiarity with post-quantum cryptography, crypto-agility, Merkle Tree Certificates, or customer migration planning for cryptographic transitions
• Prior participation in WebPKI, IETF, browser trust, transparency, or security standards communities

Benefits

• Medical/Rx Insurance
• Dental Insurance
• Vision Insurance
• Flexible Spending Accounts
• Commuter Spending Accounts
• Fertility & Family Forming Benefits
• On-demand mental health support and Employee Assistance Program
• Global Travel Medical Insurance
• Short and Long Term Disability Insurance
• Life & Accident Insurance
• 401(k) Retirement Savings Plan
• Employee Stock Participation Plan

Before you apply

• Applicants who progress to the offer stage may be asked to attend an in-person interview within a Cloudflare Office or Hub
• Position may require access to information protected under U.S. export control laws
• Offer may be conditioned on authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license

About the company

Cloudflare runs one of the world’s largest networks that powers millions of websites and Internet properties. The company is on a mission to help build a better Internet.