Senior Infrastructure Engineer - Certification Authority

About the role

Fastly is seeking a technical expert to manage and evolve our global Certification Authority infrastructure. You will focus on the security, scalability, and reliability of the systems that underpin our TLS and encryption services. In this capacity, you will own the design and operational integrity of the cryptographic foundations that power our edge network. The role requires deep engagement with both infrastructure and application teams to align certificate services with evolving product initiatives. You will be responsible for ensuring that our Certification Authority remains a trusted root of confidence for our customers and their end users. This position demands a proactive approach to identifying potential vulnerabilities and implementing robust controls before incidents occur. You will play a critical part in the continuous improvement of our security posture and compliance frameworks.

About the role

As a Senior Infrastructure Engineer focused on Certification Authority operations, you will be instrumental in maintaining the trustworthiness of Fastly's edge cloud platform. The position involves shaping the strategic and tactical direction of our public and internal PKI. You will work at the intersection of infrastructure reliability and security protocol implementation. Success in this role hinges on your ability to balance rigorous security standards with the demands of a high-velocity engineering environment. You will act as a subject matter expert, guiding initiatives that impact how encryption is delivered and managed globally. The work you do directly influences the security posture of every customer leveraging Fastly's services.

What you'll do

• Design and maintain the architecture for our internal and public-facing Certification Authority systems.
• Automate certificate lifecycle management including issuance, renewal, and revocation processes.
• Ensure the platform meets high standards for security, compliance, and availability.
• Collaborate with engineering teams to integrate certificate services into our edge cloud platform.
• Monitor infrastructure performance and troubleshoot complex issues related to PKI and cryptographic protocols.
• Implement and oversee key management procedures to safeguard cryptographic materials.
• Develop and execute strategies for scalability to support rapid growth in certificate demand.
• Analyze operational metrics to drive optimization and reliability improvements.
• Lead incident response efforts for critical PKI-related events.
• Define and maintain documentation for operational procedures and system configurations.
• Partner with security teams to conduct audits and validate compliance with industry standards.
• Guide the adoption of new cryptographic algorithms and protocols as the industry evolves.

Requirements

• Proven experience in managing PKI infrastructure and Certification Authority operations.
• Proficiency in TLS/SSL protocols and cryptographic standards.
• Strong background in infrastructure engineering and automation.
• Ability to manage high-traffic, distributed systems.
• Demonstrated expertise in certificate lifecycle automation.
• Experience with hardware security modules or secure cryptographic devices.
• Knowledge of public key infrastructure best practices and frameworks.
• Commitment to maintaining the highest standards of security and integrity.

Skills & tools

• PKI and Certificate Management
• TLS/SSL protocols
• Infrastructure automation
• Distributed systems architecture

Practical notes

This position is based in San Francisco, Canada, and operates on a full-time engagement basis. The work location places you within a dynamic tech hub where innovation meets practical infrastructure demands. There are no specific visa sponsorship details or travel requirements outlined in the source material, implying standard local employment policies apply. The role does not list a compensation figure, indicating that pay details are omitted from this particular job description. You are expected to adhere to the operational rhythms and security protocols inherent in a high-scale infrastructure environment. Success in this role will depend on your ability to work independently while coordinating closely with cross-functional partners. The position is designed for a candidate who thrives in complex technical landscapes and can translate strategic security goals into actionable engineering tasks. You will be expected to maintain a sharp focus on reliability and uptime for critical certificate services. The environment demands a thoughtful balance between rapid iteration and rigorous security validation. If you are passionate about building the trust mechanisms that enable secure communication on the internet, this role offers a unique opportunity to make a lasting impact.