Staff Software Development Engineer in Test, PKI

What you'll be doing

• You'll become a resident expert on Netskope's PKI platform, ensuring our services are as secure and reliable as they are scalable.
• You'll dive into the heart of the product lifecycle, partnering with PMs and Architects to shape requirements and review designs from the ground up.
• You'll design smart test strategies that cover everything from certificate lifecycles to APIs and distributed cloud infrastructure.
• You'll build and maintain powerful automation frameworks using tools like Python, PyTest, and Selenium.
• You'll automate the tricky stuff: REST APIs, enrollment workflows, and essential services like OCSP and CRL.
• You'll put our security to the test, validating TLS/mTLS, digital signatures, and encryption protocols to keep our users safe.
• You'll own the quality of your features from the first line of code through to monitoring them in production.
• You'll create automated suites that test performance, resiliency, and even chaos to make sure we stay up and running.
• You'll team up with SREs, Security Engineers, and Support teams to make the whole platform better.
• You'll join our on-call rotation to solve real customer problems and turn those lessons into better automation.
• You'll constantly look for ways to improve our CI/CD pipelines and engineering best practices.
• You'll mentor other engineers and help lead the technical direction of our Quality Engineering group.

What you bring to the table

• At least 8 years in software engineering, with 5+ years focused on SDET roles for cloud apps.
• Expert-level Python skills and a knack for building scalable frameworks.
• Real-world experience with PyTest, Robot, Selenium, or Playwright.
• A background in testing REST APIs, microservices, and distributed systems.

• A rock-solid understanding of PKI, specifically:

  • X.509 Certificates
  • Certificate Authorities (Root & Intermediate)
  • Certificate Lifecycle Management
  • Certificate Revocation (CRL/OCSP)
  • Certificate Signing Requests (CSR)
  • SSL/TLS and Mutual TLS (mTLS)
  • Digital Signatures and Encryption

• Experience with heavy-duty security products like SWG, CFW, or Zero Trust platforms.

• A deep understanding of networking basics: TCP/IP, DNS, Load Balancing, and HTTPS.

• Familiarity with identity protocols like OAuth 2.0, SAML, and JWT.

• A track record of validating highly available and secure distributed systems.

• Experience working with SQL and NoSQL databases like PostgreSQL or MongoDB.

• The ability to look at the "big picture" and make quality decisions that impact the entire product.

• AI-Assisted Engineering: Proven practical adoption of AI tools (e.g., GitHub Copilot, Cursor, Gemini) for code generation, debugging, root cause analysis, and increasing delivery velocity.

Bonus points if you have

• Experience with Venafi, HashiCorp Vault, or other enterprise PKI solutions.
• Worked with HSMs and managed cryptographic keys.
• Experience in AWS, Azure, or GCP cloud environments.
• Skills with Docker, Kubernetes, and Helm.
• Hands-on experience with GitHub Actions, Jenkins, or Drone.
• Used Terraform or Ansible to manage infrastructure.
• Experience with observability tools like Prometheus, Grafana, or Datadog.
• Linux mastery and shell scripting skills.
• Knowledge of service meshes like Istio or Linkerd.

Education

• A Bachelor's degree in Computer Science or equivalent discipline is required, Master's degree strongly preferred.