Staff Software Development Engineer in Test, PKI

About this role

<div class="content-intro"><h2>Join the Future of Security at Netskope</h2> <p>Netskope (NASDAQ: NTSK) is a leader in modern security and networking for the cloud and AI era. We secure and accelerate cloud, data, and AI in real time, everywhere. Thousands of customers, including more than 30 of the Fortune 100, trust the Netskope One platform, its Zero Trust Engine, and the powerful NewEdge network to gain full visibility and control without performance trade-offs.</p> <p>At Netskope, our technology is driven by our greatest strength: our people. We believe that belonging powers innovation, and success is both personal and organizational. We embrace differences in gender, ethnicity, beliefs, ability, and identity, creating an environment where every voice is heard and respected. We empower our employees to bring their authentic selves to work, grow their careers through continuous education and mentorship, and lead with transparency and curiosity. Join a team where you belong, where you are encouraged to be an entrepreneur, and where together, we continue to redefine the landscape of security.</p> <p>Visit <a href="https://www.netskope.com/company/careers" target="_blank">Careers at Netskope</a> to learn more. Follow us on <a href="https://www.linkedin.com/company/netskope" target="_blank">LinkedIn</a> and <a href="https://www.instagram.com/netskope/" target="_blank">Instagram</a>.</p></div><h2><strong>What you'll be doing</strong></h2> <ul> <li>You'll become a resident expert on Netskope's PKI platform, ensuring our services are as secure and reliable as they are scalable.</li> <li>You'll dive into the heart of the product lifecycle, partnering with PMs and Architects to shape requirements and review designs from the ground up.</li> <li>You'll design smart test strategies that cover everything from certificate lifecycles to APIs and distributed cloud infrastructure.</li> <li>You'll build and maintain powerful automation frameworks using tools like Python, PyTest, and Selenium.</li> <li>You'll automate the tricky stuff: REST APIs, enrollment workflows, and essential services like OCSP and CRL.</li> <li>You'll put our security to the test, validating TLS/mTLS, digital signatures, and encryption protocols to keep our users safe.</li> <li>You'll own the quality of your features from the first line of code through to monitoring them in production.</li> <li>You'll create automated suites that test performance, resiliency, and even chaos to make sure we stay up and running.</li> <li>You'll team up with SREs, Security Engineers, and Support teams to make the whole platform better.</li> <li>You'll join our on-call rotation to solve real customer problems and turn those lessons into better automation.</li> <li>You'll constantly look for ways to improve our CI/CD pipelines and engineering best practices.</li> <li>You'll mentor other engineers and help lead the technical direction of our Quality Engineering group.</li> </ul> <h1><strong>What you bring to the table</strong></h1> <ul> <li>At least 8 years in software engineering, with 5+ years focused on SDET roles for cloud apps.</li> <li>Expert-level Python skills and a knack for building scalable frameworks.</li> <li>Real-world experience with PyTest, Robot, Selenium, or Playwright.</li> <li>A background in testing REST APIs, microservices, and distributed systems.</li> <li>A rock-solid understanding of PKI, specifically:</li> <ul> <li>X.509 Certificates</li> <li>Certificate Authorities (Root & Intermediate)</li> <li>Certificate Lifecycle Management</li> <li>Certificate Revocation (CRL/OCSP)</li> <li>Certificate Signing Requests (CSR)</li> <li>SSL/TLS and Mutual TLS (mTLS)</li> <li>Digital Signatures and Encryption</li> </ul> <li>Experience with heavy-duty security products like SWG, CFW, or Zero Trust platforms.</li> <li>A deep understanding of networking basics: TCP/IP, DNS, Load Balancing, and HTTPS.</li> <li>Familiarity with identity protocols like OAuth 2.0, SAML, and JWT.</li> <li>A track record of validating highly available and secure distributed systems.</li> <li>Experience working with SQL and NoSQL databases like PostgreSQL or MongoDB.</li> <li>The ability to look at the "big picture" and make quality decisions that impact the entire product.</li> <li>AI-Assisted Engineering: Proven practical adoption of AI tools (e.g., GitHub Copilot, Cursor, Gemini) for code generation, debugging, root cause analysis, and increasing delivery velocity.</li> </ul> <h1><strong>Bonus points if you have</strong></h1> <ul> <li>Experience with Venafi, HashiCorp Vault, or other enterprise PKI solutions.</li> <li>Worked with HSMs and managed cryptographic keys.</li> <li>Experience in AWS, Azure, or GCP cloud environments.</li> <li>Skills with Docker, Kubernetes, and Helm.</li> <li>Hands-on experience with GitHub Actions, Jenkins, or Drone.</li> <li>Used Terraform or Ansible to manage infrastructure.</li> <li>Experience with observability tools like Prometheus, Grafana, or Datadog.</li> <li>Linux mastery and shell scripting skills.</li> <li>Knowledge of service meshes like Istio or…