Senior Security Operations Engineer II

Join Axon and be a Force for Good.

At Axon, we're on a mission to Protect Life. We're explorers, pursuing society's most critical safety and justice issues with our ecosystem of devices and cloud software. Like our products, we work better together. We connect with candor and care, seeking out diverse perspectives from our customers, communities and each other.

Life at Axon is fast-paced, challenging and meaningful. Here, you'll take ownership and drive real change. Constantly grow as you work hard for a mission that matters at a company where you matter.

Your Impact

As a Senior Security Operations Engineer, you'll play a key role in ensuring the reliability, performance, and scalability of our security infrastructure. You'll solve complex technical problems, improve our systems through thoughtful automation, and work closely with cross-functional teams to support our services as they scale. You'll provide hands on execution capabilities for new initiatives in the Identity space, primarily to build out, maintain and support for PKI solutions at scale and provide auxiliary execution support for user identity and access management (IAM) initiatives.

Your work will have a direct impact on uptime, efficiency, and the overall developer experience-contributing to our mission to deliver high-quality mission critical systems at speed.

What You'll Do

Location:

This role is based out of our Seattle, WA office and follows a hybrid schedule. We rely on in-person collaboration and ask that team members work onsite Tuesdays through Fridays, with the flexibility to work remotely on Mondays, unless there is an approved workplace accommodation. We believe that connection fuels innovation, and our in-office culture is designed to foster meaningful teamwork, mentorship, and shared success.

Reports to:

Manager, Info Sec Engineering

Direct Reports: 0

* Design, deploy, and operate PKI infrastructure supporting secure authentication, encryption, and certificate lifecycle management.

* Manage certificates, secrets, keys, and trust stores, including issuance, renewal, rotation, and revocation.

* Build, maintain, and secure Kubernetes clusters hosting PKI and secret management services.

* Automate PKI and secret management workflows using Infrastructure-as-Code, CI/CD pipelines, and Kubernetes-native tooling.

* Monitor and troubleshoot PKI, certificate, secret, and Kubernetes infrastructure issues, performing root cause analysis and remediation.

* Collaborate with other teams to integrate PKI and secrets management into cloud-native applications and services.

* Maintain operational documentation, runbooks, and disaster recovery procedures for PKI and Kubernetes environments.

* Ensure PKI and Kubernetes platforms meet security, reliability, and compliance requirements.

* Build and operate secure, reliable, and scalable PKI and secrets management infrastructure.

* Design and implement PKI solutions supporting 24x7 production and enterprise environments.

* Manage certificates, secrets, encryption keys, and access controls across Kubernetes-based platforms.

* Deploy, maintain, and secure Kubernetes clusters hosting PKI and secret management services.

* Automate certificate lifecycle, secret rotation, and infrastructure operations using CI/CD and Infrastructure-as-Code.

* Troubleshoot and resolve PKI, certificate, secret, and Kubernetes infrastructure issues.

* Collaborate with SRE, platform, and security teams to integrate PKI and secrets management into cloud-native services.

* Participate in on-call rotations, incident response, and operational improvement initiatives.

* Document PKI architecture, operational procedures, and security best practices

What You Bring

* 7+ years of experience in infrastructure, platform, SRE, or security engineering roles.

* Strong experience managing and securing Kubernetes clusters and containerized workloads in production environments.

* Hands-on experience with PKI platforms, certificate lifecycle management, secrets management, and encryption technologies.

* Experience operating cloud-native security solutions such as AWS KMS, Azure Key Vault, Hashi Corp Vault, EJBCA, Smallstep, or Venafi.

* Strong understanding…