Senior Staff Machine Identity and PKI Engineer
Nscale is a London-based, full-stack AI cloud and infrastructure company that provides GPU compute, managed AI services, orchestration software, data centers, and power infrastructure for AI training, fine-tuning, and inference.
Funding history
About Nscale
Nscale builds and operates vertically integrated AI infrastructure spanning software, GPU compute, networking, storage, purpose-built data centers, and power. Its active cloud platform offers self-service inference endpoints, fine-tuning, managed Kubernetes and Slurm, virtual machines, and GPU clusters.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will establish machine identities for service accounts, workloads, credentials, certificates, tokens, and AI agents. You will lead PKI and certificate lifecycle management, replace static credentials with short-lived workload identity, define machine-secret standards, plan post-quantum cryptography, and set technical standards across SRE, platform, and product.
Requirements
- 10+ years of platform engineering, infrastructure security, or SRE experience
- Deep experience with workload identity, secrets, PKI, CA hierarchy design, and cross-team standards
- Hands-on PKI experience with certificate profiles, revocation, HSMs, and certificate lifecycle management platforms
- Production experience with HashiCorp Vault, authentication methods, dynamic secrets, and the PKI engine
- Experience with cloud workload identity, OIDC federation, Kubernetes service accounts, and RBAC
- Ability to write Go or Python
- Experience with Terraform
Responsibilities
- Build a register for non-human identities with owners, scopes, and rotation dates
- Replace static credentials with short-lived workload identity
- Own PKI and lead implementation of a certificate lifecycle management platform
- Automate certificate issuance and renewal
- Implement device certificates for managed endpoints
- Set machine-secret standards and define workload authentication to Vault
- Define identity, ownership, scoped access, and kill switches for AI agents and tool integrations
- Plan post-quantum cryptography across the certificate estate
Benefits
- Equity
- Medical insurance
- Dental insurance
- Vision insurance
- Flexible paid time off
- Parental leave
- Retirement plan participation
- Flexible work schedule