Back
Tier-1 brand, generic senior engineer title, mid-level experience, and metro location increase applicant competition.
Specialized SPIFFE/PKI/service-identity expertise and HSM integrations limit cross-industry transferability.
Explicit 6+ years plus mandatory SPIFFE/SPIRE, PKI, Kubernetes and cloud skills indicate high filtering strictness.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Lead design and deployment of SPIFFE/SPIRE for service-to-service authentication across dev/stage/prod environments, integrated with enterprise PKI/HSM.
Develop and maintain service identity components including verifier libraries/SDKs (Java, Go, .NET), node and workload attestors, and standardize caller identity propagation.
Own automation, operations, and reliability: IaC/CI/CD pipelines, zero-downtime certificate rotations, HA/DR planning, developer enablement tools, and operational excellence practices.
Bachelor’s degree or higher in Computer Science or related field.
6+ years experience in backend/platform/security systems focusing on service identity, PKI, or zero-trust architectures.
Hands-on experience with SPIFFE/SPIRE or equivalent workload identity systems and expertise in X.509, PKI, CA hierarchies, certificate lifecycle, and JWT/JWKS.
Proficiency in at least two among Go, Java, and .NET; Kubernetes production experience; Infrastructure as code and CI/CD pipelines; AWS fundamentals including EKS, EC2, VPC, IAM, and HSM integrations.
Experienced in designing and operating zero-trust service identity platforms in production-scale environments with focus on reliability and security.
Strong systems thinker with end-to-end ownership from architecture to operations, including automation and developer enablement.
Familiar with multi-region deployments, certificate lifecycle management, and integration of security tools like policy enforcement and observability stacks.