Senior Infrastructure Engineer — Certification Authority

<div class="content-intro"><p>Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including GitHub, Yelp, Paramount, and JetBlue.</p> <p>We're building a more trustworthy Internet. Come join us.</p></div><p><strong>Senior Infrastructure Engineer — Certification Authority</strong></p> <p>Certainly is Fastly's publicly-trusted TLS certification authority, built on Boulder — the same open-source ACME server that powers Let's Encrypt. Our team owns the entire stack: Go services, bare-metal and cloud infrastructure, monitoring, security tooling, database operations, and the compliance posture that keeps us trusted by every major browser and operating system. We operate under annual third-party audit and public accountability — our work is methodical, change-controlled, and documented. You'll bring engineering depth across infrastructure disciplines and apply it within a structured, compliance-driven environment where correctness is non-negotiable. This is high-impact work: your systems directly protect Fastly's customers and the broader internet.</p> <p><strong>What You'll Do:</strong></p> <p>You won't own all of these simultaneously on day one. We pair extensively, ramp deliberately, and expect 6–12 months to full breadth.</p> <ul> <li>Build, upgrade, and maintain production infrastructure across multiple datacenters and cloud — databases, container runtimes, operating systems, and security tooling — following change control procedures from staging through production</li> <li>Develop and maintain Go services within our ACME server, contribute patches upstream, and build internal automation tooling in Go, Python and Bash</li> <li>Own cryptographic operations including key ceremonies and HSM management — work that demands precision and benefits from systematic execution</li> <li>Triage security vulnerabilities against our infrastructure, determine applicability, and drive remediation on defined timelines</li> <li>Operate and improve monitoring and alerting systems, participate in on-call rotation, and perform structured root cause analysis for production incidents</li> <li>Prepare and present technical evidence for annual WebTrust audits — demonstrate to external auditors how your systems satisfy compliance controls</li> </ul> <p><strong>What We're Looking For:&nbsp;</strong></p> <ul> <li>Strong background operating and automating Linux infrastructure, with experience managing the full lifecycle of production systems. Most Senior Engineers at Fastly have at least 5 years of related experience</li> <li>Software development capability in Go, Python, or a comparable systems language — you read unfamiliar codebases, debug production issues, and build tools to solve operational problems</li> <li>Experience with container orchestration (Docker Compose or Kubernetes) in production, including multi-environment promotion workflows</li> <li>Demonstrated ability to work within structured change management: you document changes before executing, test in staging, and follow defined procedures</li> <li>Clear technical writing — design documents, runbooks, audit evidence, and incident reports that communicate precisely to both engineering peers and non-technical reviewers</li> </ul> <p><strong>We’ll be super impressed if you have experience in any of these:</strong></p> <ul> <li>Relational database administration (replication, major version upgrades, failover orchestration)</li> <li>Applied cryptography or PKI operations — key ceremonies, HSM configuration, X.509 certificate lifecycle</li> <li>Monitoring system design (metrics pipelines, dashboards, alert routing)</li> <li>Working within audited or regulated environments where your engineering decisions face external scrutiny (WebTrust, SOC 2, FedRAMP, PCI)</li> <li>Multi-datacenter infrastructure with defined failover and disaster recovery procedures</li> </ul> <p><strong>Work Hours:</strong>&nbsp;</p> <ul> <li>This position will require you to be available during core business hours and occasional nights and weekends as necessary to support any on-call