Prod Public Key Infrastructure (PKI) builds and operates the foundational cryptographic and identity infrastructure that secures Google's planetary-scale production environments and sovereign cloud deployments. Every service, machine, workload, and administrative action across Google relies on our platform for cryptographically verified identity, scoped authorization, and high-assurance trust boundaries.
Our organization is structured around three sub-teams to enable our core user journeys:
- Identity: Empowers production entities to prove identity and associated security attributes, owning root-of-trust management, full-lifecycle credential issuance, and revocation infrastructure.
- Platform: Enables Google engineering teams and PKI operators to deploy and operate automated, self-service PKI stacks with minimal operational toil and sustaining cost.
- Delegation: Enables authenticated principals, distributed workloads, and autonomous AI agents to delegate scoped subsets of permissions dynamically, safely, and transparently.
US: $262000 - $364000 (USD) + 25% bonus target + equity + benefits
Learn more about benefits at Google.
Responsibilities
- Define the overarching multi-year architectural blueprint across the domains to prevent technical fragmentation. Lead cross-domain design reviews, establish unified cryptographic and API design standards, and resolve complex architectural trade-offs across sub-teams.
- Author and drive the 3–5 year technical goal for production identity, anticipating industry shifts in post-quantum readiness, confidential computing, and agentic workflows. Translate enterprise-wide security mandates including Regional Security Isolation (RSI) and Cryptographic Hygiene programs into actionable, sequenced engineering roadmaps.
- Align stakeholders on priorities, shared dependencies, and architectural best practices. Guide specialized working groups to drive cross-cutting technical consistency across sub-teams.
- Partner closely with Security Leadership, Cloud Foundations, Infrasec SRE, CorpEng, and Hardware Security teams to align security boundaries and platform roadmaps.
- Lead operational excellence, multi-region fault tolerance, automated key rotations, and disaster recovery readiness across all production services.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 8 years of experience programming in C++.
- 5 years of experience with design and architecture; and testing/launching software products.
Preferred qualifications:
- Experience setting multi-team technical strategy or acting as a Lead Architect/Tech Lead for mission-critical, and large-scale systems.
- Deep technical expertise in Public Key Infrastructure (PKI), applied cryptography (X.509, cryptographic key lifecycles, asymmetric/symmetric algorithms), and identity/token architectures.
- Demonstrated ability to navigate cross-functional organizational dynamics, build consensus among executive leadership stakeholders, and lead geographically distributed engineering teams.