Senior Infrastructure Engineer — Certification Authority

Posting Open Date: 06/23/2026

Anticipated Posting Close Date*: 07/24/2026

*Job posting may close early due to the volume of applicants.

Senior Infrastructure Engineer — Certification Authority

Certainly is Fastly's publicly-trusted TLS certification authority, built on Boulder — the same open-source ACME server that powers Let's Encrypt. Our team owns the entire stack: Go services, bare-metal and cloud infrastructure, monitoring, security tooling, database operations, and the compliance posture that keeps us trusted by every major browser and operating system. We operate under annual third-party audit and public accountability — our work is methodical, change-controlled, and documented. You'll bring engineering depth across infrastructure disciplines and apply it within a structured, compliance-driven environment where correctness is non-negotiable. This is high-impact work: your systems directly protect Fastly's customers and the broader internet.

What You'll Do:

You won't own all of these simultaneously on day one. We pair extensively, ramp deliberately, and expect 6–12 months to full breadth.

• Build, upgrade, and maintain production infrastructure across multiple datacenters and cloud — databases, container runtimes, operating systems, and security tooling — following change control procedures from staging through production
• Develop and maintain Go services within our ACME server, contribute patches upstream, and build internal automation tooling in Go, Python and Bash
• Own cryptographic operations including key ceremonies and HSM management — work that demands precision and benefits from systematic execution
• Triage security vulnerabilities against our infrastructure, determine applicability, and drive remediation on defined timelines
• Operate and improve monitoring and alerting systems, participate in on-call rotation, and perform structured root cause analysis for production incidents
• Prepare and present technical evidence for annual WebTrust audits — demonstrate to external auditors how your systems satisfy compliance controls

What We're Looking For: 

• Strong background operating and automating Linux infrastructure, with experience managing the full lifecycle of production systems. Most Senior Engineers at Fastly have at least 5 years of related experience
• Software development capability in Go, Python, or a comparable systems language — you read unfamiliar codebases, debug production issues, and build tools to solve operational problems
• Experience with container orchestration (Docker Compose or Kubernetes) in production, including multi-environment promotion workflows
• Demonstrated ability to work within structured change management: you document changes before executing, test in staging, and follow defined procedures
• Clear technical writing — design documents, runbooks, audit evidence, and incident reports that communicate precisely to both engineering peers and non-technical reviewers

We’ll be super impressed if you have experience in any of these:

• Relational database administration (replication, major version upgrades, failover orchestration)
• Applied cryptography or PKI operations — key ceremonies, HSM configuration, X.509 certificate lifecycle
• Monitoring system design (metrics pipelines, dashboards, alert routing)
• Working within audited or regulated environments where your engineering decisions face external scrutiny (WebTrust, SOC 2, FedRAMP, PCI)
• Multi-datacenter infrastructure with defined failover and disaster recovery procedures

Work Hours: 

• This position will require you to be available during core business hours and occasional nights and weekends as necessary to support any on-call coverage.

Work Location(s) & Travel Requirements: 

The preferred hybrid locations for this position are:

• Denver, CO
• San Francisco, CA
• New York, NY

Fastly currently embraces a largely hybrid model for most roles which allows employees flexibility to split their time between the office and home.  

There is a strong preference for candidates near a local office.  However, we may be willing to consider exceptionally qualified remote candidates within the US.

This position may require travel as required by your role or requested by your manager.

SF / LA Fair Chance Ordinance Statement

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Salary:

The estimated salary range for this position is $167,790 - $201,348.

Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills, qualifications, and location.

This role may be eligible to participate in Fastly’s equity and discretionary bonus programs.

Benefits: 

We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with Fastly. Curious about our offerings? 

We offer a comprehensive benefits package including medical, dental, and vision insurance. Family planning, mental health support along with Employee Assistance Program, Insurance (Life, Disability, and Accident), a Flexible Vacation policy and up to 18 days of accrued paid sick leave are there to help support our employees. We also offer 401(k) (including company match) and an Employee Stock Purchase Program. For 2026, we offer 11 paid local holidays, 12 paid company wellness days.