Senior Infrastructure Engineer (Certification Authority)

Join Fastly, a leading edge cloud platform, as a Senior Infrastructure Engineer. In this role, you will be responsible for building, upgrading, and maintaining production infrastructure across multiple datacenters and cloud environments. You will also develop and maintain Go services, own cryptographic operations, triage security vulnerabilities, and improve monitoring and alerting systems. This position requires a strong background in Linux infrastructure, software development, and experience in audited or regulated environments.

• Construire, mettre à niveau et maintenir l'infrastructure de production dans plusieurs centres de données et cloud, y compris les bases de données, les systèmes d'exploitation et les outils de sécurité.
• Développer et maintenir des services Go au sein de notre serveur ACME, contribuer aux correctifs en amont et construire des outils d'automatisation internes en Go, Python et Bash.
• Posséder les opérations cryptographiques, y compris les cérémonies de clés et la gestion des HSM, en veillant à la précision et à l'exécution systématique.
• Demonstrated ability to work within structured change management: you document changes before executing, test in staging, and follow defined procedures
• Strong background operating and automating Linux infrastructure, with experience managing the full lifecycle of production systems. Most Senior Engineers at Fastly have at least 5 years of related experience
• Software development capability in Go, Python, or a comparable systems language — you read unfamiliar codebases, debug production issues, and build tools to solve operational problems
• Clear technical writing — design documents, runbooks, audit evidence, and incident reports that communicate precisely to both engineering peers and non-technical reviewers
• Experience with container orchestration (Docker Compose or Kubernetes) in production, including multi-environment promotion workflows
• Relational database administration (replication, major version upgrades, failover orchestration)
• Applied cryptography or PKI operations — key ceremonies, HSM configuration, X.509 certificate lifecycle
• Monitoring system design (metrics pipelines, dashboards, alert routing)
• Working within audited or regulated environments where your engineering decisions face external scrutiny (WebTrust, SOC 2, FedRAMP, PCI)
• Multi-datacenter infrastructure with defined failover and disaster recovery procedures