Tech Lead Manager, PKI & Secrets Engineering

CoreWeave is a specialized cloud provider, delivering a massive scale of GPU compute resources on top of the industry’s fastest and most flexible infrastructure. CoreWeave builds cloud solutions for compute intensive use cases — VFX and rendering, machine learning and AI, batch processing, and Pixel Streaming — that are up to 35 times faster and 80% less expensive than the large, generalized public clouds. Learn more at www.coreweave.com.

We're seeking a passionate Technical Lead Manager to revolutionize how the industry thinks about Public Key Infrastructure (PKI) and secrets management. You'll spearhead the design, development, and maintenance of PKI and secrets management across all of CoreWeave. Your innovative solutions will automate provisioning, streamline operations, and significantly boost our security posture.  If you love building robust, user-centric, and scalable security solutions, this is the perfect role for you.

Responsibilities:

• Design and implement a comprehensive PKI architecture, including Root CA, Intermediate CAs, issuance policies and HSMs
• Design and implement a secrets management solution to securely store and manage sensitive credentials across the organization
• Develop and implement operational procedures for PKI and secrets management, ensuring high availability, disaster recovery, and auditable logging
• Work closely with engineering teams to integrate PKI and secrets management into new and existing workflows

Qualifications & Experience:

• 5+ years of of experience in information security, with a focus on PKI and/or secrets management
• Proven track record of leading small teams to scale large challenges
• Proven experience in designing, implementing, and managing PKI infrastructure, including highly available HSM designs
• Knowledge of Kubernetes operators for managing PKI certificates (e.g., cert-manager).
• Proficiency with popular secrets management tools (Hashicorp Vault, Doppler, etc)
• Solid foundation in container technologies and application containerization
• Demonstrated ability to design, troubleshoot, and thoroughly document solutions
• Proficiency in writing code with modern languages (Go, Python, Javascript, etc)

Nice to Have:

• Deep understanding of Kubernetes architecture, particularly how secrets and certificates should be managed within a cluster.
• Experience with integrating Secrets Management solutions directly into Kubernetes deployments (e.g., Vault sidecar injection, Kubernetes Secrets Store CSI Driver).

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $190,000 - $240,000 annually. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience.

Hybrid Workplace

Successful candidates will be expected to attend onboarding training at our NJ Headquarters within their first several weeks of employment, with subsequent quarterly travel requirements of 1 week duration.

If you reside within a 30-mile radius of our New Jersey, New York, or Philadelphia offices, we're excited for you to join us at the office at least three times a week, recognizing the significance we place on fostering connections, collaboration, and creativity within our office culture. Our commitment to operating as a hybrid workplace underscores our dedication to enabling our employees to tailor their work-life balance to their individual preferences.