RefolkCandidates
Open nowEngineering

Staff Software Development Engineer in Test, PKI

Netskope · Santa Clara, California

Location
Santa Clara, California, United States
Level
Staff
Posted
Last week

About this role

Join the Future of Security at Netskope

Netskope (NASDAQ: NTSK) is a leader in modern security and networking for the cloud and AI era. We secure and accelerate cloud, data, and AI in real time, everywhere. Thousands of customers, including more than 30 of the Fortune 100, trust the Netskope One platform, its Zero Trust Engine, and the powerful NewEdge network to gain full visibility and control without performance trade-offs.

At Netskope, our technology is driven by our greatest strength: our people. We believe that belonging powers innovation, and success is both personal and organizational. We embrace differences in gender, ethnicity, beliefs, ability, and identity, creating an environment where every voice is heard and respected. We empower our employees to bring their authentic selves to work, grow their careers through continuous education and mentorship, and lead with transparency and curiosity. Join a team where you belong, where you are encouraged to be an entrepreneur, and where together, we continue to redefine the landscape of security.

Visit Careers at Netskope to learn more. Follow us on LinkedIn and Instagram.

What you'll be doing

  • You'll become a resident expert on Netskope's PKI platform, ensuring our services are as secure and reliable as they are scalable.
  • You'll dive into the heart of the product lifecycle, partnering with PMs and Architects to shape requirements and review designs from the ground up.
  • You'll design smart test strategies that cover everything from certificate lifecycles to APIs and distributed cloud infrastructure.
  • You'll build and maintain powerful automation frameworks using tools like Python, PyTest, and Selenium.
  • You'll automate the tricky stuff: REST APIs, enrollment workflows, and essential services like OCSP and CRL.
  • You'll put our security to the test, validating TLS/mTLS, digital signatures, and encryption protocols to keep our users safe.
  • You'll own the quality of your features from the first line of code through to monitoring them in production.
  • You'll create automated suites that test performance, resiliency, and even chaos to make sure we stay up and running.
  • You'll team up with SREs, Security Engineers, and Support teams to make the whole platform better.
  • You'll join our on-call rotation to solve real customer problems and turn those lessons into better automation.
  • You'll constantly look for ways to improve our CI/CD pipelines and engineering best practices.
  • You'll mentor other engineers and help lead the technical direction of our Quality Engineering group.

What you bring to the table

  • At least 8 years in software engineering, with 5+ years focused on SDET roles for cloud apps.
  • Expert-level Python skills and a knack for building scalable frameworks.
  • Real-world experience with PyTest, Robot, Selenium, or Playwright.
  • A background in testing REST APIs, microservices, and distributed systems.
  • A rock-solid understanding of PKI, specifically:
    • X.509 Certificates
    • Certificate Authorities (Root & Intermediate)
    • Certificate Lifecycle Management
    • Certificate Revocation (CRL/OCSP)
    • Certificate Signing Requests (CSR)
    • SSL/TLS and Mutual TLS (mTLS)
    • Digital Signatures and Encryption
  • Experience with heavy-duty security products like SWG, CFW, or Zero Trust platforms.
  • A deep understanding of networking basics: TCP/IP, DNS, Load Balancing, and HTTPS.
  • Familiarity with identity protocols like OAuth 2.0, SAML, and JWT.
  • A track record of validating highly available and secure distributed systems.
  • Experience working with SQL and NoSQL databases like PostgreSQL or MongoDB.
  • The ability to look at the "big picture" and make quality decisions that impact the entire product.
  • AI-Assisted Engineering: Proven practical adoption of AI tools (e.g., GitHub Copilot, Cursor, Gemini) for code generation, debugging, root cause analysis, and increasing delivery velocity.

Bonus points if you have

  • Experience with Venafi, HashiCorp Vault, or other enterprise PKI solutions.
  • Worked with HSMs and managed cryptographic keys.
  • Experience in AWS, Azure, or GCP cloud environments.
  • Skills with Docker, Kubernetes, and Helm.
  • Hands-on experience with GitHub Actions, Jenkins, or Drone.
  • Used Terraform or Ansible to manage infrastructure.
  • Experience with observability tools like Prometheus, Grafana, or Datadog.
  • Linux mastery and shell scripting skills.
  • Knowledge of service meshes like Istio or Linkerd.

Education

  • A Bachelor's degree in Computer Science or equivalent discipline is required, Master's degree strongly preferred.

Compensation:

At Netskope, salary is one component of our competitive total rewards package. The salary range for this position is as listed below. This is a national range. For purposes of complying with applicable laws, the range applies to candidates in California, Colorado, Illinois, Maryland, New York, Washington, and other states.

The successful candidate’s starting pay will also be determined based on job-related skills, experience, qualifications, location, and market conditions.

For all sales roles, the posted salary range is the On Target Earnings (OTE) range for the role, which is the sum of base salary and target commission amount at 100% goal achievement.

In addition to salary, candidates may be eligible for other forms of compensation such as participation in a bonus plan (for non-sales roles) and a stock award program. Candidates may also be eligible for a comprehensive health plan and other benefits that can be reviewed at Netskope Benefits site.

Salary Range$116,000-$235,500 USD

Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.

Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.

The application window for this position is expected to close within 50 days. You may apply by filling out the below information, or visiting our Netskope Careers site.

As published by Netskope. Applications are handled on their site.

One click, then it is written

Apply to Netskope with a resume written for this role.

Queue Staff Software Development Engineer in Test, PKI and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Netskope’s form for you.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • 25 sent a week, free
  • No card
  • Nothing sent until you say so

More roles at Netskope

See all

Similar roles elsewhere

See more

Put this to work

Paste your career in once. Every application after that is written for you.

Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • New matches ranked and written before you are up.
  • Every bullet stays inside what your history supports. Nothing invented.
  • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

500 free credits on sign-up. No card. Nothing is sent until you say so.

Listed from the job board Netskope publishes. Refolk is not the employer and does not handle their hiring. Applications go to Netskope directly.