Qualys

Cloud-based vulnerability management and compliance platform

Lead Software Engineer - CLM / Machine & AI Identity

Backend EngineeringConfirmed live in the last 24 hours

Full-timePune, Maharashtra, IndiaNo salary listedIn-person

About the Job

Requirements

At least 8 years of hands-on SaaS engineering experience in cloud environments.
Strong expertise in Java and Spring Boot, with solid fundamentals in distributed systems and scalable API design.
Experience with event-driven systems such as Kafka or JMS, caching systems such as Redis or Memcached, and relational database management systems; Oracle is preferred.
Familiarity with Docker, Kubernetes, Jenkins, and continuous integration and continuous delivery.
A bachelor's degree or higher in Computer Science or a related field.
Strongly preferred: experience in at least two of the following domains: public key infrastructure/certificate lifecycle management, including X.509, certificate signing request workflows, certificate authority integrations, certificate revocation lists/Online Certificate Status Protocol, or hardware security module-backed signing; ACME v2 or cert-manager; SPIFFE/SPIRE and workload identity models; managed cloud identity for AWS, Azure, or Google Cloud Platform and OpenID Connect federation; service mesh and mutual TLS; Kubernetes controllers/operators and custom resource definitions; or non-human identity and AI-agent security concepts and platforms.

Responsibilities

Lead architecture and development of next-generation certificate lifecycle management platform components.
Build high-scale identity ingestion and processing pipelines for short-lived credentials and workload identities.
Drive roadmap delivery across ACME v2, SPIFFE/SPIRE integration, and Kubernetes/service-mesh discovery.
Collaborate with Product, site reliability engineering, Security, VMDR, and TotalCloud teams to ship resilient, production-ready features.
Mentor engineers on design, performance, distributed systems, and secure coding for public key infrastructure and identity systems.

Desired Qualifications

Exposure to post-quantum migration.
Contributions to Cloud Native Computing Foundation or Internet Engineering Task Force work, including SPIRE, cert-manager, Open Policy Agent, WIMSE, or ACME.
Experience with Go or Rust for collectors, plugins, or sidecars.

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Lead Software Engineer (CLM / Machine & AI Identity)

Qualys is looking for a hands-on Lead Software Engineer to help evolve CertView CLM into a unified machine, workload, and AI-agent identity platform. You will lead design and delivery of scalable cloud-security services handling 100M+ transactions and terabytes of data daily, with focus areas including SPIFFE/SPIRE, ephemeral certificates, Kubernetes/service-mesh identity, managed cloud identities, and AI-agent governance.

What You’ll Do

Lead architecture and development of next-generation CLM platform components
Build high-scale identity ingestion and processing pipelines for short-lived credentials and workload identities.
Drive roadmap delivery across ACME v2, SPIFFE/SPIRE integration, Kubernetes/service-mesh discovery.
Collaborate with Product, SRE, Security, VMDR, and TotalCloud teams to ship resilient, production-ready features.
Mentor engineers on design, performance, distributed systems, and secure coding for PKI/identity systems.

Core Qualifications

8+ years of hands-on SaaS engineering experience in cloud environments.
Strong Java/Spring Boot expertise; solid fundamentals in distributed systems and scalable API design.
Experience with event-driven systems (Kafka/JMS), caching (Redis/Memcached), and RDBMS (Oracle preferred).
Familiarity with Docker, Kubernetes, Jenkins, and CI/CD.
Bachelor’s degree or higher in Computer Science (or related field).

Strongly Preferred Domain Experience (Any 2+)

PKI/CLM (X.509, CSR workflows, CA integrations, CRL/OCSP, HSM-backed signing)
ACME v2 / cert-manager
SPIFFE/SPIRE and workload identity models
Cloud managed identity (AWS/Azure/GCP) and OIDC federation
Service mesh & mTLS
Kubernetes controllers/operators and CRDs
NHI and AI-agent security concepts and platforms

Nice to Have

Post-quantum migration exposure
CNCF/IETF contributions (SPIRE, cert-manager, OPA, WIMSE/ACME)
Go or Rust experience for collectors/plugins/sidecars

About the Company

Qualys

Cloud-based vulnerability management and compliance platform

Qualys provides cloud-based cybersecurity and compliance solutions that help organizations secure their IT infrastructure. It offers vulnerability management, policy compliance, web application security, and IT asset management through the Qualys Cloud Platform, enabling continuous monitoring, automated checks, policy enforcement, and real-time compliance reporting. It differentiates itself with real-time analytics, automated workflows, and a scalable cloud architecture that unify multiple security and compliance functions in one ecosystem across on-premises, cloud, and hybrid environments. Its goal is to help organizations continuously assess risk, automate security processes, and demonstrate compliance across their entire IT footprint.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Redwood City, CA
Founded: 1999

Recently Posted Jobs

Explore more opportunities at Qualys

See more jobs