Senior Security Engineer, Pki & Secrets

CoreWeave

Livingston, NJ, US
Base: $165,000 to $242,000; bonus/equity: discreti...
Hybrid (on-site with potential remote work for candidates located more than 30 miles from an office)
Pki hierarchy design and certificate lifecycle management
Hashicorp vault or similar secrets management platforms
Hardware security modules (hsm) and pkcs#11 integration
CoreWeave is seeking a Senior Security Engineer specializing in PKI & Secrets to enhance their cryptographic infrastructure for secure AI workloads. The role involves designing and operating systems related to PKI management, secrets management, and key management in a fast-paced, innovative environment

Job Summary

  • CoreWeave is a publicly traded company delivering essential cloud infrastructure specifically built for AI pioneers and global enterprises.
  • The role involves shaping cryptographic infrastructure across the global fleet by designing PKI hierarchies and secrets management platforms.
  • Candidates benefit from a comprehensive rewards package including 100% paid medical insurance, flexible PTO, and generous 401(k) matching.

Matching Summary

Match Score: 85

CoreWeave is seeking a Senior Security Engineer specializing in PKI & Secrets to enhance their cryptographic infrastructure for secure AI workloads. The role involves designing and operating systems related to PKI management, secrets management, and key management in a fast-paced, innovative environment.

Salary

Base: $165,000 to $242,000; Bonus/Equity: Discretionary bonus and equity awards included; Benefits: Comprehensive program including 100% paid medical, dental, vision, and 401(k) match

Skills & Requirements

Must-have

  • PKI hierarchy design and certificate lifecycle management
  • HashiCorp Vault or similar secrets management platforms
  • Hardware Security Modules (HSM) and PKCS#11 integration
  • Applied cryptography including TLS and envelope encryption
  • Go or Python programming for production tooling
  • Kubernetes integration with cert-manager and External Secrets Operator

Nice-to-have

  • Post-quantum cryptography readiness and migration planning
  • Code signing workflows using Cosign/Sigstore and transparency logs
  • Hardware attestation and workload identity with TPM/SPIFFE
  • Experience operating PKI in hyperscaler environments
  • Customer-managed keys and multi-tenant key isolation design

Key Requirements

  • 5+ years of experience in security or infrastructure engineering
  • Hands-on experience with HashiCorp Vault
  • Proficiency in Go or Python languages
  • Solid understanding of applied cryptography algorithms

Work Rights

Not specified

Tailored Resume

Cover Letter