Principal Engineer - PlatSec Cryptographic Trust

Principal Engineer - Plat Sec Cryptographic Trust

6 days ago – Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation. Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better.

And it means we prioritize a diverse F5 community where each individual can thrive.

F5 BIG-IP Platform Security Team

The PKI and Digital Security Engineer leads the design, development, and deployment of Public Key Infrastructure (PKI), Post-Quantum Cryptography (PQC), and digital security solutions for F5 enterprise-scale environments. This role ensures seamless integration of certificate management processes while maintaining security and integrity standards across products, applications and cloud environments. As a technical leader, this position plays a key role in enabling secure digital ecosystems while staying ahead of emerging technologies in cryptography and digital security.

• Design, develop, and implement PKI, PQC, and digital security solutions to support business needs.
• Collaborate with cross-functional teams to integrate PKI services into F5 products and applications, focusing on TLS and certificate management.
• Automate PKI processes, including certificate issuance, renewal, and revocation, to optimize efficiency.
• Ensure the secure management of TLS certificates and cryptographic operations to maintain the integrity and reliability of systems.
• Deliver PKI services within cloud environments (AWS, Azure, Kubernetes) and oversee their scalability and performance.
• Provide expert technical guidance in designing PKI architectures with considerations for post-quantum cryptography (PQC) concerns.
• Act as a trusted advisor for PKI-related aspects in negotiations and interactions with internal and external stakeholders.
• Continuously monitor the performance of PKI systems to ensure availability, fault tolerance, and resilience.
• Stay updated on advancements in PKI, PQC, and digital security technologies, incorporating emerging trends into solutions.

• PKI Implementation: 8+ years of experience designing, deploying, and securing PKI systems, including certificate lifecycle management (issuance, renewal, revocation), TLS integrations, and cryptographic operations.
• Cloud Security Expertise:
  Hands‑on expertise delivering PKI solutions in cloud‑native environments (AWS, Azure, Kubernetes) and maintaining security within hybrid architectures.
• Post‑Quantum Cryptography (PQC):
  Proven track record of transitioning systems to post‑quantum cryptography standards and implementing advanced cryptographic algorithms (RSA, ECC, lattice‑based cryptography).
• Automation & Dev Sec Ops :
  Proficiency in streamlining PKI processes using automation tools (Terraform, Ansible) and scripting languages (Python, Power Shell) within Dev Sec Ops  frameworks.

• Advanced knowledge of PKI concepts, including certificate management (issuance, renewal, revocation) and cryptographic operations.
• Expertise in TLS protocols and secure certificate handling.
• Proficiency in cloud‑native environments such as AWS, Azure, and Kubernetes for deploying and managing PKI services.
• Familiarity with post‑quantum cryptography (PQC) and transitioning digital security systems to accommodate emerging PQC standards.
• Hands‑on experience with automating PKI processes using scripting languages (e.g., Python, Power Shell).
• Deep understanding of security protocols, cryptographic algorithms, and key management practices.
• Knowledge of modern Dev Sec Ops  practices and automation tools (e.g., Terraform, Ansible).
• Experience in performance tuning, scaling, and troubleshooting PKI systems.

• Technical Leadership:
  Ability to guide teams in designing and implementing…