Staff Software Development Engineer in Test, PKI
Netskope — Santa Clara
- Company: Netskope
- Location: Santa Clara
- Salary: $158k - $225k
- Work model: On-site
- Category: Engineering
- Experience: Senior (6+yr)
- Timezone: Any timezone (fully async)
- Posted: 2026-07-17
Tags: QA Engineer, full-time, Actively Hiring, B2b, Company Stage, Top Investors
Job description
What you'll be doing
- You'll become a resident expert on Netskope's PKI platform, ensuring our services are as secure and reliable as they are scalable.
- You'll dive into the heart of the product lifecycle, partnering with PMs and Architects to shape requirements and review designs from the ground up.
- You'll design smart test strategies that cover everything from certificate lifecycles to APIs and distributed cloud infrastructure.
- You'll build and maintain powerful automation frameworks using tools like Python, PyTest, and Selenium.
- You'll automate the tricky stuff: REST APIs, enrollment workflows, and essential services like OCSP and CRL.
- You'll put our security to the test, validating TLS/mTLS, digital signatures, and encryption protocols to keep our users safe.
- You'll own the quality of your features from the first line of code through to monitoring them in production.
- You'll create automated suites that test performance, resiliency, and even chaos to make sure we stay up and running.
- You'll team up with SREs, Security Engineers, and Support teams to make the whole platform better.
- You'll join our on-call rotation to solve real customer problems and turn those lessons into better automation.
- You'll constantly look for ways to improve our CI/CD pipelines and engineering best practices.
- You'll mentor other engineers and help lead the technical direction of our Quality Engineering group.
What you bring to the table
- At least 8 years in software engineering, with 5+ years focused on SDET roles for cloud apps.
- Expert-level Python skills and a knack for building scalable frameworks.
- Real-world experience with PyTest, Robot, Selenium, or Playwright.
- A background in testing REST APIs, microservices, and distributed systems.
- A rock-solid understanding of PKI, specifically:
- X.509 Certificates
- Certificate Authorities (Root & Intermediate)
- Certificate Lifecycle Management
- Certificate Revocation (CRL/OCSP)
- Certificate Signing Requests (CSR)
- SSL/TLS and Mutual TLS (mTLS)
- Digital Signatures and Encryption
- Experience with heavy-duty security products like SWG, CFW, or Zero Trust platforms.
- A deep understanding of networking basics: TCP/IP, DNS, Load Balancing, and HTTPS.
- Familiarity with identity protocols like OAuth 2.0, SAML, and JWT.
- A track record of validating highly available and secure distributed systems.
- Experience working with SQL and NoSQL databases like PostgreSQL or MongoDB.
- The ability to look at the "big picture" and make quality decisions that impact the entire product.
- AI-Assisted Engineering: Proven practical adoption of AI tools (e.g., GitHub Copilot, Cursor, Gemini) for code generation, debugging, root cause analysis, and increasing delivery velocity.
Bonus points if you have
- Experience with Venafi, HashiCorp Vault, or other enterprise PKI solutions.
- Worked with HSMs and managed cryptographic keys.
- Experience in AWS, Azure, or GCP cloud environments.
- Skills with Docker, Kubernetes, and Helm.
- Hands-on experience with GitHub Actions, Jenkins, or Drone.
- Used Terraform or Ansible to manage infrastructure.
- Experience with observability tools like Prometheus, Grafana, or Datadog.
- Linux mastery and shell scripting skills.
- Knowledge of service meshes like Istio or Linkerd.
Education
- A Bachelor's degree in Computer Science or equivalent discipline is required, Master's degree strongly preferred.