Fastly · 16 hours ago
Staff Engineer - PKI Systems
New York, NY
Full-time
Hybrid
Senior Level, Lead/Staff
$211K/yr - $254K/yr
7+ years expFastly is a company that helps people stay better connected through its edge cloud platform. They are seeking a Staff PKI Systems Engineer to build and operate Certainly, their publicly-trusted TLS certification authority, while mentoring a dedicated team of engineers and ensuring the security and reliability of their PKI systems.
Cloud ComputingEnterprise SoftwareSoftwareCloud Data ServicesCloud InfrastructureCloud SecurityContent Delivery NetworkSecurity
Responsibilities
Own the design and implementation of security-critical PKI infrastructure, including major refactors and new capabilities
Lead cryptographic operations including key ceremonies, credential management, and multi-datacenter failover procedures
Drive technical strategy for system hardening, automation, and resilience across ephemeral, containerized microservices and HSM environments
Investigate and solve complex, ambiguous engineering problems and production incidents, creating proof-of-concepts and performing root cause analysis with a focus on security, automation, observability and stability
Collaborate with TLS client, SRE, Security, and Product Engineering teams to translate complex business requirements and compliance standards (WebTrust, PCI) and evolve our infrastructure
Mentor team members and foster a culture of technical excellence, providing guidance on design, performance, and cross-team collaboration
Qualification
Required
Extensive experience designing, implementing, and maintaining distributed systems on Linux with a focus on automation and continuous monitoring. Most Staff Engineers at Fastly have more than 7 years of related experience
Strong software development background (Go or similar) with a track record of owning the design phases of broadly scoped work or major refactors
Deep understanding of applied cryptography, PKI architecture, and standards such as RFC 5280 and RFC 8555 (ACME)
Proven ability to lead technical decision-making, write clear design documents, and influence architectural discussions across multiple teams
Experience building highly secure environments, including vulnerability management, system hardening, and intrusion detection
Demonstrated ability to mentor engineers and help them understand the impact of their work on customers and stakeholders
Preferred
Operating a publicly-trusted CA or large-scale PKI, particularly work with ACME
Hardware Security Module (HSM) configuration and operation
Go programming with experience debugging production systems
High-availability database administration
Container orchestration in security-sensitive environments
Working in highly regulated environments (WebTrust, SOC 2, PCI)
Benefits
Comprehensive benefits package including medical, dental, and vision insurance
Family planning
Mental health support along with Employee Assistance Program
Insurance (Life, Disability, and Accident)
Flexible Vacation policy
Up to 18 days of accrued paid sick leave
401(k) (including company match)
Employee Stock Purchase Program
11 paid local holidays
12 paid company wellness days
Company
Fastly
Fastly helps digital businesses keep pace with their customer expectations by delivering secure and online experiences.
1001-5000 employees
H1B Sponsorship
Fastly has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (9)
2024 (11)
2023 (7)
2022 (12)
2021 (6)
2020 (5)
Funding
Current Stage
Public CompanyTotal Funding
$529MKey Investors
DTCPSapphire Ventures,Sorenson CapitalICONIQ Growth
2025-12-05Post Ipo Debt· $160M
2024-12-02Post Ipo Debt· $150M
2019-05-16IPO
Leadership Team
Kip Compton
Chief Executive Officer
Hooman Beheshti
VP Technology
Recent News
2026-02-06
2026-01-22
Company data provided by crunchbase