Design, deploy, and operate PKI infrastructure supporting secure authentication, encryption, and certificate lifecycle management.
Manage certificates, secrets, keys, and trust stores, including issuance, renewal, rotation, and revocation.
Build, maintain, and secure Kubernetes clusters hosting PKI and secret management services.
Automate PKI and secret management workflows using Infrastructure-as-Code, CI/CD pipelines, and Kubernetes-native tooling.
Monitor and troubleshoot PKI, certificate, secret, and Kubernetes infrastructure issues, performing root cause analysis and remediation.
Collaborate with other teams to integrate PKI and secrets management into cloud-native applications and services.
Maintain operational documentation, runbooks, and disaster recovery procedures for PKI and Kubernetes environments.
Ensure PKI and Kubernetes platforms meet security, reliability, and compliance requirements.
Build and operate secure, reliable, and scalable PKI and secrets management infrastructure.
Design and implement PKI solutions supporting 24x7 production and enterprise environments.
Manage certificates, secrets, encryption keys, and access controls across Kubernetes-based platforms.
Deploy, maintain, and secure Kubernetes clusters hosting PKI and secret management services.
Automate certificate lifecycle, secret rotation, and infrastructure operations using CI/CD and Infrastructure-as-Code.
Troubleshoot and resolve PKI, certificate, secret, and Kubernetes infrastructure issues.
Collaborate with SRE, platform, and security teams to integrate PKI and secrets management into cloud-native services.
Participate in on-call rotations, incident response, and operational improvement initiatives.
Document PKI architecture, operational procedures, and security best practices
What You Bring
7+ years of experience in infrastructure, platform, SRE, or security engineering roles.
Strong experience managing and securing Kubernetes clusters and containerized workloads in production environments.
Hands-on experience with PKI platforms, certificate lifecycle management, secrets management, and encryption technologies.
Experience operating cloud-native security solutions such as AWS KMS, Azure Key Vault, HashiCorp Vault, EJBCA, Smallstep, or Venafi.
Strong understanding of Linux systems, networking, distributed systems, and Kubernetes security best practices.
Experience with automation, scripting, Infrastructure-as-Code, and CI/CD pipelines for PKI and infrastructure operations.
Familiarity with IAM and access management platforms such as Okta, Entra ID, Keycloak, or similar solutions.
Experience with monitoring, logging, alerting, and troubleshooting distributed infrastructure and security systems.
Strong communication and collaboration skills across engineering, operations, and security teams.
Passion for building secure, scalable, and reliable infrastructure platforms.
Benefits that Benefit You
Competitive salary and 401k with employer match
Discretionary paid time off
Paid parental leave for all
Medical, Dental, Vision plans
Fitness Programs
Emotional & Mental
Benefits
Dental insuranceVision insurance401(k)Remote work optionsParental leave
Additional Information
Join Axon and be a Force for Good.
At Axon, we're on a mission to Protect Life. We're explorers, pursuing society's most critical safety and justice issues with our ecosystem of devices and cloud software. Like our products, we work better together. We connect with candor and care, seeking out diverse perspectives from our customers, communities and each other.
Life at Axon is fast-paced, challenging and meaningful. Here, you'll take ownership and drive real change. Constantly grow as you work hard for a mission that matters at a company where you matter.
Axon · Boston, MA