Tech Lead Manager, PKI & Secrets Engineering

CoreWeave is a specialized cloud provider, delivering a massive scale of GPU compute resources on top of the industry’s fastest and most flexible infrastructure. CoreWeave builds cloud solutions for compute intensive use cases — VFX and rendering, machine learning and AI, batch processing, and Pixel Streaming — that are up to 35 times faster and 80% less expensive than the large, generalized public clouds. Learn more at www.coreweave.com.

At CoreWeave we're seeking an experienced Engineer to spearhead the design, development, and maintenance of PKI and secrets management across a next generation, AI Hyperscale cloud. Our infrastructure is powering leading AI Labs around the world and your innovative solutions will significantly impact our entire security posture.

Responsibilities:

• Design and implement a comprehensive PKI architecture, including Root CA, Intermediate CAs, issuance policies and HSMs
• Design and implement a secrets management solution to securely store and manage sensitive credentials across the organization
• Develop and implement operational procedures for PKI and secrets management, ensuring high availability, disaster recovery, and auditable logging
• Work closely with engineering teams to integrate PKI and secrets management into new and existing workflows

Qualifications & Experience:

• 5+ years of of experience in information security, with a focus on PKI and/or secrets management
• Proven track record of leading small teams to scale large challenges
• Proven experience in designing, implementing, and managing PKI infrastructure, including highly available HSM designs
• Proficiency with popular secrets management tools (Hashicorp Vault, Doppler, etc)
• Solid foundation in container technologies and application containerization
• Demonstrated ability to design, troubleshoot, and thoroughly document solutions
• Proficiency in writing code with modern languages (Go, Python, Javascript, etc)

Nice to Have:

• Deep understanding of Kubernetes architecture, particularly how secrets and certificates should be managed within a cluster.
• Knowledge of Kubernetes operators for managing PKI certificates (e.g., cert-manager).
• Experience with integrating Secrets Management solutions directly into Kubernetes deployments (e.g., Vault sidecar injection, Kubernetes Secrets Store CSI Driver).

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $240,000 - $275,000 annually. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience.