Qualys
LeadSoftwareEngineer(CLM/Machine&AIIdentity)
Neural analysis suggests this role is
optimal for Lead candidates.
“Lead Software Engineer (CLM / Machine & AI Identity) at Qualys. Skills: Java, Spring Boot, distributed systems, scalable API design, event-driven systems, SPIFFE/SPIRE, Kubernetes, PKI, identity systems. Lead architecture and development of next-generation CLM platform components. Build high-scale identity ingestion and processing pipelines for short-lived credentials and workload identities”
What You'll Achieve.
ship resilient, production-ready features; support the most exciting missions in the world!
Industry & Context.
distributed systems; scalable API design
What They're Looking For.
Must Have
8+ years of hands-on SaaS engineering experience in cloud environments, Java/Spring Boot solid fundamentals in distributed systems and scalable API design, Experience with event-driven systems (Kafka/JMS), caching (Redis/Memcached), and RDBMS (Oracle preferred), Familiarity with Docker, Kubernetes, Jenkins, and CI/CD, Bachelor’s degree or higher in Computer Science (or related field)
Nice to Have
PKI/CLM (X. 509, CSR workflows, CA integrations, CRL/OCSP, HSM-backed signing), ACME v2 / cert-manager, SPIFFE/SPIRE and workload identity models, Cloud managed identity (AWS/Azure/GCP) and OIDC federation, Service mesh & mTLS, Kubernetes controllers/operators and CRDs, NHI and AI-agent security concepts and platforms, Post-quantum migration exposure, CNCF/IETF contributions (SPIRE, cert-manager, OPA, WIMSE/ACME), Go or Rust experience for collectors/plugins/sidecars
What You'll Do.
Lead architecture and development of next-generation CLM platform components
Build high-scale identity ingestion and processing pipelines for short-lived credentials and workload identities
Drive roadmap delivery across ACME v2
SPIFFE/SPIRE integration
Kubernetes/service-mesh discovery
Mentor engineers on design
and secure coding for PKI/identity systems
How You'll Work.
Team & Collaboration
Collaborate with Product, SRE, Security, VMDR, and TotalCloud teams to ship resilient, production-ready features
Process & Methodology
Drive roadmap delivery
Full Job Description
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! **Lead Software Engineer (CLM / Machine & AI Identity)** Qualys is looking for a hands-on Lead Software Engineer to help evolve CertView CLM into a unified machine, workload, and AI-agent identity platform. You will lead design and delivery of scalable cloud-security services handling 100M+ transactions and terabytes of data daily, with focus areas including SPIFFE/SPIRE, ephemeral certificates, Kubernetes/service-mesh identity, managed cloud identities, and AI-agent governance. **What You’ll Do** * Lead architecture and development of next-generation CLM platform components * Build high-scale identity ingestion and processing pipelines for short-lived credentials and workload identities. * Drive roadmap delivery across ACME v2, SPIFFE/SPIRE integration, Kubernetes/service-mesh discovery. * Collaborate with Product, SRE, Security, VMDR, and TotalCloud teams to ship resilient, production-ready features. * Mentor engineers on design, performance, distributed systems, and secure coding for PKI/identity systems. **Core Qualifications** * 8+ years of hands-on SaaS engineering experience in cloud environments. * Strong Java/Spring Boot expertise; solid fundamentals in distributed systems and scalable API design. * Experience with event-driven systems (Kafka/JMS), caching (Redis/Memcached), and RDBMS (Oracle preferred). * Familiarity with Docker, Kubernetes, Jenkins, and CI/CD. * Bachelor’s degree or higher in Computer Science (or related field). **Strongly Preferred Domain Experience (Any 2 +)** * PKI/CLM (X.509, CSR workflows, CA integrations, CRL/OCSP, HSM-backed signing) * ACME v2 / cert-manager * SPIFFE/SPIRE and workload identity models * Cloud managed identity (AWS/Azure/GCP) and OIDC federation * Service mesh & mTLS * Kubernetes controllers/operators and CRDs * NHI and AI-agent security concepts and platforms **Nice to Have** * Post-quantum migration
Applying for this Lead Software Engineer (CLM / Machine & AI Identity) role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about Qualys?
Real rants from real employees. Read before you apply.