Overview

Salesforce Data Security is seeking a Lead Software Engineer to architect, build, and scale a unified certificate Registration Authority (RA), the front door for cryptographic trust across a global multi-cloud platform. This foundational trust layer authenticates and authorizes millions of certificate issuance requests daily, securing machine-to-machine communication, workload identity, and data-in-transit for enterprise cloud customers.

This is an AI-first engineering team that uses advanced AI coding assistants, prompt engineering, and shared-system-context tools daily to accelerate workflows, review code, and generate comprehensive tests.

Responsibilities

• •Architect, build, and maintain the unified Registration Authority (RA) serving as the single certificate-issuance front door for a global, multi-cloud platform.
• •Design and optimize highly concurrent, multi-substrate build paths in Go, ensuring seamless deployment across diverse public-cloud environments.
• •Develop and scale both synchronous and asynchronous certificate issuance paths using robust distributed state-machine orchestration.
• •Implement strictly evaluated hierarchical policy engines and authorization controls to validate substrate-specific workload identity and attestation.
• •Drive robust certificate lifecycle management and automation by integrating with and abstracting multiple public and private Certificate Authorities (CAs).
• •Write resilient, observable, and strictly tested code capable of surviving underlying infrastructure degradation.
• •Instrument comprehensive telemetry, distributed tracing, and alerting to maintain stringent availability and performance SLAs.
• •Mentor engineers, conduct rigorous code reviews, and raise the bar for distributed systems design.
• •Partner with Security Architecture to translate complex compliance requirements into automated, scalable software controls.
• •Respond to and resolve complex distributed systems escalations, identifying root causes and deploying durable architectural fixes.
• •Establish best practices for AI-augmented software development and prompt engineering.
• •Contribute to building and maintaining shared system context enabling AI to operate accurately and reliably.
• •Critically evaluate code (human- or AI-generated) for correctness, quality, security, and performance.

Requirements

• •9+ years of professional software development experience with a proven track record of designing and operating large-scale distributed systems.
• •Deep, production-grade expertise in Go (Golang), Java, or Rust, including advanced concurrency patterns, memory management, and multi-substrate build configurations.
• •Extensive experience deploying and operating highly available, mission-critical services across AWS and GCP.
• •Ability to design resilient RESTful and gRPC web services backed by robust distributed state machines and asynchronous processing pipelines.
• •Strong background in observability (telemetry, distributed tracing, metrics) and modern CI/CD deployment pipelines.
• •Proficiency with AI coding assistants and shared-context workflows.
• •Advanced prompt engineering skills and ability to write precise, structured prompts.
• •Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

Nice to Have

• •Deep domain knowledge of Public Key Infrastructure (PKI), X.509 certificate profiles, and mutual TLS (mTLS) architectures.
• •Strong understanding of certificate lifecycle management and automated certificate provisioning.
• •Awareness of post-quantum cryptography (PQC) standards such as ML-KEM and crypto-agility design principles.
• •Experience with Kubernetes, container orchestration, and Infrastructure-as-Code paradigms.
• •Familiarity with designing or operating multi-tenant policy engines and hierarchical authorization graphs.

Compensation

The typical base salary range for this position is $172,500 - $260,100 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range is $207,800 - $285,800 annually. The range represents base salary only and does not include bonus, equity, or benefits.