Senior Software Engineer (PKI)
Posted Updated
- The Security Foundations organization at CoreWeave keeps CoreWeave Cloud secure by design, from data centers and GPU fleets to the platform layers powering our customers’ AI workloads
- The PKI & Secrets team owns the cryptographic infrastructure underpinning the confidentiality, integrity, and authenticity of CoreWeave’s data and systems: PKI, secrets management, HSMs, key management, and code signing
- We partner with teams across the company to deliver cryptographic services that are secure, reliable, and easy to use at scale
- As a Senior Software Engineer on the PKI & Secrets team, you will shape how CoreWeave manages cryptographic infrastructure across its global fleet
- You’ll design and operate our attestation infrastructure in particular, which guarantees that every component in our cloud runs untampered and expected firmware software and its dependencies
- This work is directly relevant to ensuring CoreWeave cloud is a trusted environment for our customers to use and is a critical part of our infrastructure
- The team also broadly owns PKI hierarchies, secrets management platforms, HSM infrastructure, and key management systems
- Contribute to the design, implementation, and operation of CoreWeave’s Attestation Service that measures and validates our cloud infrastructure’s integrity backed by hardware root of trust
- Manage and evolve gathering verifiable data from our environment at scale, asserting trust and confidence that feeds into the lifecycle and governance of our infrastructure
- Do hands-on work in the Root of Trust and Identity space such as HSM Infrastructure, key management, PKI solutions and their integration with many platforms and products across CoreWeave
- (5)+ years of experience in security engineering or infrastructure engineering
- Bachelor’s degree in Computer Science or related field
- Experience with Kubernetes
- Proficiency in Go, Python, or similar languages, with the ability to build production tooling and automation
- Strong understanding of PKI concepts including CA hierarchies, certificate profiles, issuance policies, revocation, and trust distribution
- Experience building Attestation Service to verify integrity of machines