Staff Systems Engineer - PKI

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including Vimeo, Pinterest, The New York Times, and GitHub.

We're building a more trustworthy Internet. Come join us.

Please note: You MUST CURRENTLY reside within a commutable distance to NYC to be considered for this position

As a PKI Systems Engineer, you will help build and operate Certainly, Fastly’s publicly-trusted TLS certification authority. Working with cryptosystem specialists, along with site reliability engineers and others, you will implement systems to meet security objectives, reliability goals, and compliance requirements. Certainly delivers widely trusted, short validity period TLS certificates at scale to Fastly customers.

We are looking for a versatile engineer who enjoys being deeply involved in all aspects of building and operating our infrastructure. Someone who will excel at improving our technology systems and processes, and will show an aptitude for solving complex issues.

This is a role with a small and supportive team. In addition to contributing to industry-leading security products and services, you’ll make sure our customers benefit from a service built to the highest security standards. We’re a geographically distributed remote team, and while hybrid work from a Fastly office is our standard, we also embrace remote work.

What You'll Do:

• Deploy and manage a highly secure, distributed, fault tolerant Public Key Infrastructure (PKI)
• Work in partnership with our SRE, security, and product engineering teams to operate secure Fastly infrastructure (network, systems, applications, and business processes)
• Integrate open-source and licensed software into a modern system that emphasizes automation and resilience
• Design and evolve the environment and processes to exceed security, compliance, availability, and maintainability goals
• Work across the organization to meet compliance requirements

What We're Looking For: 

• Proven experience implementing and maintaining distributed systems on Linux, including automated configuration and deployment, and continuous monitoring and alerting
• Experience operating and scaling systems built on ephemeral, containerized microservices
• Experience with applied cryptography and tools like OpenSSL, CFSSL, or LibreSSL, and understanding of PKI architecture and standards such as RFC 5280
• Experience building and maintaining highly secure Linux environments, including system hardening, vulnerability detection and remediation, monitoring/alerting, and intrusion prevention and detection
• Experience with Hardware Security Module (HSM) configuration and operation
• Solid verbal and written communications skills

We’ll be super impressed if you have experience in any of these: 

• Experience with microservices, protocols like gRPC, bash scripting, debugging Go and Python, and also technologies in our tech stack is preferred: Linux, Docker, Hashicorp Vault, Chef, Splunk
• RDBMS administration (e.g. MySQL, MariaDB) experience in a high-availability production environment
• Comfortable working in a highly regulated environment (e.g. WebTrust, PCI)
• Experience operating a large-scale PKI

Work Hours: This position will require you to be available during core business hours.

Work Location(s) & Travel Requirements: 

This position is open to candidates residing in the following preferred office locations: 

• San Francisco, CA
• Los Angeles, CA
• Denver, CO
• New York, NY 

This position may require travel as required by your role or requested by your manager. 

Salary: 

The estimated salary range for this position is $195,720 to $244,640.

Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills, qualifications, and location.

This role may be eligible to participate in Fastly’s equity and discretionary bonus programs.

Benefits:

We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with Fastly. Curious about our offerings? 

• We offer a comprehensive benefits package including medical, dental, and vision insurance. Family planning, mental health support along with Employee Assistance Program, Insurance (Life, Disability, and Accident), an open vacation policy and up to 18 days of accrued paid sick leave are there to help support our employees. We also offer 401(k) (including company match) and an Employee Stock Purchase Program. For 2023, we offer 10 paid local holidays, 11 paid company wellness days.

Why Fastly?

• We have a huge impact. Fastly is a small company with a big reach. Not only do our customers have a tremendous user base, but we also support a growing number of open source projects and initiatives. Outside of code, employees are encouraged to share causes close to their heart with others so we can help lend a supportive hand.

• We love distributed teams. Fastly’s home-base is in San Francisco, but we have multiple offices and employees sprinkled around the globe. 

• We value diversity. Growing and maintaining our inclusive and diverse team matters to us. We are committed to being a company where our employees feel comfortable bringing their authentic selves to work and have the ability to be successful -- every day.

• We are passionate. Fastly is chock full of passionate people and we’re not ‘one size fits all’. Fastly employs authors, pilots, skiers, parents (of humans and animals), makeup geeks, coffee connoisseurs, and more. We love employees for who they are and what they are passionate about.

We’re always looking for humble, sharp, and creative folks to join the Fastly team. If you think you might be a fit please apply! A fully completed application and resume or CV are required when applying.

Fastly is committed to ensuring equal employment opportunity and to providing employees with a safe and welcoming work environment free of discrimination and harassment. Our employment decisions are based on business needs, job requirements and individual qualifications. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, family or parental status, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.

Consistent with the Americans with Disabilities Act (ADA) and federal or state disability laws, Fastly will provide reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact your Recruiter, or the Fastly Employee Relations team at [email protected] or 501-287-4901. 

Fastly collects and processes personal data submitted by job applicants in accordance with our Privacy Policy. Please see our privacy notice for job applicants.