Principal Engineer - PlatSec Cryptographic Trust

**Role Overview** The PKI and Digital Security Engineer leads the design, development, and deployment of Public Key Infrastructure (PKI), Post-Quantum Cryptography (PQC), and digital security solutions for F5 enterprise-scale environments. This role ensures seamless integration of certificate management processes while maintaining security and integrity standards across products, applications and cloud environments. As a technical leader, this position plays a key role in enabling secure digital ecosystems while staying ahead of emerging technologies in cryptography and digital security.**Key Responsibilities** **Required Qualifications** **Experience** PKI Implementation: 8+ years of experience designing, deploying, and securing PKI systems, including certificate lifecycle management (issuance, renewal, revocation), TLS integrations, and cryptographic operations. Automation & DevSecOps: Proficiency in streamlining PKI processes using automation tools (Terraform, Ansible) and scripting languages (Python, PowerShell) within DevSecOps frameworks.**Technical Skills** Advanced knowledge of PKI concepts, including certificate management (issuance, renewal, revocation) and cryptographic operations. Proficiency in cloud-native environments such as AWS, Azure, and Kubernetes for deploying and managing PKI services.Familiarity with post-quantum cryptography (PQC) and transitioning digital security systems to accommodate emerging PQC standards. Hands-on experience with automating PKI processes using scripting languages (e.g., Python, PowerShell). Knowledge of modern DevSecOps practices and automation tools (e.g., Terraform, Ansible).Experience in performance tuning, scaling, and troubleshooting PKI systems. **Core Competencies** **Technical Leadership**: Ability to guide teams in designing and implementing innovative PKI and PQC architectures. **Collaborative Communication**: Strong interpersonal skills to work effectively across multidisciplinary teams and stakeholders. **Adaptability**: Skills to incorporate new advancements in cryptography and security into existing systems. **Preferred Qualifications** 12+ years of hands-on experience in designing, implementing, and managing PKI infrastructure and certificate lifecycle management.Proven experience in cryptography, including TLS protocols, digital certificate operations, and key management. Experience working with emerging standards around Post-Quantum Cryptography (PQC). Demonstrated experience with automation tools (e.g., Ansible, Terraform) and scripting languages (e.g., Python, PowerShell). Familiarity with security frameworks such as NIST, FIPS, or ISO 27001 related to cryptographic operations. Knowledge of cryptographic algorithms (RSA, ECC, AES, SHA) and PQC methods like lattice-based cryptography. Proficiency in implementing PKI solutions across hybrid environments (on-premise and cloud).Experience in mentoring teams and providing technical leadership. **Education** It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination.

F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting accommodations@f5.com.**Remote**: Primarily work from designated home location but can come into an F5 office to work or travel to an offsite location as needed. #J-18808-Ljbffr