Senior Software Engineer, Certificate Management

About the Role

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.”

As a Senior Software Engineer within the Security Platform Engineering group, you'll serve as the primary execution anchor for our most critical regulatory and cryptographic initiatives. This team owns Coinbase's Public and Internal Certificate Management based systems, which is the bedrock for all Coinbase systems. You'll lead the development of high-availability services which provide novel certificate needs internally and with external partners.

What you'll do

• Lead the architecture and execution of critical cryptographic infrastructure
• Define technical strategies with a multi-quarter horizon, bringing clarity to highly ambiguous requirements for novel cryptographic solutions
• Own risky and ambitious initiatives, implementing secure and resilient cryptographic protocols in a high-stakes, zero-trust environment
• Shape engineering quality practices as a technical anchor and mentor within a team of senior engineers, driving rigorous code reviews and eliminating single points of failure
• Build alignment and secure commitment from cross-functional partners across Security, Product, and Policy to drive flawless execution

Required Skills and Experience

• 5+ years of experience in software engineering with demonstrated success building highly available, distributed systems
• Deep domain expertise in Public Key Infrastructure (PKI) and applied cryptography, with proven experience operating certificate authorities, automating X.509 certificate lifecycles (issuance, renewal, revocation, and trust-chain distribution), and safely protecting private key material with HSMs or cloud KMS
• Extensive programming experience in systems languages such as Golang, Java, C++, or Rust, with ability to operate in a Golang-heavy environment
• Proven track record operating Tier-0 or highly critical infrastructure where system resilience, security, and low latency are absolute prerequisites
• Demonstrated experience leading a team's technical strategy, architecture, and deliverables for large-scale projects, including navigating complex regulatory requirements and translating them into robust engineering solutions
• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Compensation

Annual base salary range (excluding equity and bonus): $186,065—$218,900 USD. Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).