Principal Engineer – Cryptography

November 6, 2026

Other Jobs To Apply

Job Description:

Participate in IETF standards bodies and TLS/SSL working groups representing GoDaddy
Assess CA infrastructure to identify architectural gaps, security vulnerabilities, and performance bottlenecks
Define requirements for certificate issuance pipelines, HSM integrations, and cryptographic key management systems
Specify automated compliance testing frameworks, CT log integration, OCSP responder infrastructure, and revocation mechanisms
Develop automation scripts for compliance testing and validation
Define SLIs/SLOs for certificate issuance latency, system availability, and compliance metrics
Document infrastructure-as-code requirements for CA deployment, disaster recovery, and high-availability architectures
Research requirements for post-quantum algorithms and hybrid certificate chains
Develop migration strategies from legacy cryptographic systems to next-generation algorithms
Create technical specifications for emerging standards including ACME extensions, Certificate Transparency v2, and delegated credentials
Collaborate with cryptography researchers on algorithm performance, key sizes, and implementation trade-offs
Define the roadmap for CA platform capabilities, certificate lifecycle automation, API development, and integration frameworks
Specify scalable APIs and automation tools for certificate issuance, renewal, and revocation
Document self-service platforms and tools to reduce manual certificate operations
Develop automated testing and continuous compliance monitoring with remediation capabilities
Partner with security engineering teams on threat modeling, secure coding, and vulnerability management
Lead architecture reviews and technical design sessions with cross-functional engineering teams
Establish technical documentation and compliance engineering standards
Mentor engineers on PKI, cryptographic implementations, and compliance engineering patterns
Report to GoDaddy’s Vice President Engineering Partners

Requirements:

8+ years of hands-on engineering experience in PKI systems, applied cryptography, or security infrastructure
Proven technical leadership
Strong technical background in Go, Python, Java, or C++
Deep expertise in PKI architecture, including X.509 certificate structures, ASN.1 encoding, certificate chain validation, HSM operations, and cryptographic primitives
Experience translating CA/Browser Forum Baseline Requirements into technical specifications
Experience with distributed systems, API design, database architecture, and cloud infrastructure (AWS/GCP/Azure)
Ability to define requirements for PKI protocols including ACME, Certificate Transparency, OCSP/CRL
Ability to translate compliance requirements into technical specifications, engineering requirements, and test automation scripts
Advanced degree in Computer Science, Cryptography, Mathematics, or Electrical Engineering
Experience researching and evaluating post-quantum cryptographic algorithms
Security certifications such as CISSP, CEH, or specialized cryptography credentials
Experience with security audit processes including WebTrust for CAs and ETSI EN 319 411
Contributions to PKI-related projects such as Boulder, cert-manager, OpenSSL, or BoringSSL
Experience defining requirements for high-availability systems, HSMs, and secure key ceremony procedures
Knowledge of DevSecOps, CI/CD pipelines, and infrastructure automation using Terraform, Kubernetes, or Ansible
Familiarity with OpenSSL, BoringSSL, and PKCS#11
Experience developing test automation scripts for compliance validation

Benefits:

Competitive pay
Generous time off
Parental and wellness leave
Healthcare
Retirement savings program
Medical, dental, and vision insurance
401(k) retirement plan
Paid sick time
Paid flexible time off
Paid parental leave
Life insurance
Short- and long-term disability
AD&D insurance
Mental health or EAP programs
Remote or hybrid work options
Paid holidays
Paid Wellness days
Tuition assistance
Adoption, surrogacy, and fertility benefits
Dependent daycare and backup care benefits
Employee stock purchase plan
Financial education and advice
Corporate bonus and/or equity awards may be available

Share Share