Remote opportunity at
CloudflarePrincipal Product Manager, Certificate Authority
Cloudflare operates a massive global network that secures and accelerates millions of internet properties, handling a major portion of global internet traffic. The company is currently…
Career Tools
About This Role
Cloudflare operates a massive global network that secures and accelerates millions of internet properties, handling a major portion of global internet traffic. The company is currently building a public, transparent, and redundant certificate authority to support the encrypted web, aiming for automation-first and ACME-first capabilities while supporting traditional WebPKI standards and emerging technologies like post-quantum certificates. As the Principal Product Manager for the Certificate Authority business, you will take ownership…
Job Description
Cloudflare operates a massive global network that secures and accelerates millions of internet properties, handling a major portion of global internet traffic. The company is currently building a public, transparent, and redundant certificate authority to support the encrypted web, aiming for automation-first and ACME-first capabilities while supporting traditional WebPKI standards and emerging technologies like post-quantum certificates.
As the Principal Product Manager for the Certificate Authority business, you will take ownership of the product strategy, commercial model, customer experience, and roadmap for this zero-to-one venture. This is an early-stage role on a growing team designed for a builder comfortable with high-consequence infrastructure, deep customer discovery, and strict compliance environments. You will collaborate closely with engineering, security, compliance, legal, operations, sales, and marketing to shape how Cloudflare participates in the certificate authority market.
Your scope includes defining product strategy across publicly trusted certificates, certificate lifecycle automation, ACME issuance, revocation, and integrations with the wider platform. You will serve as an advocate for resilience and trust, balancing security, uptime, and commercial adoption while helping make Cloudflare customer zero.
Responsibilities
- Define product strategy for public certificates, ACME issuance, renewal workflows, revocation, Certificate Transparency, and developer experience
- Design product requirements focused on resilience, fast certificate replacement, and minimal customer blast radius during security incidents
- Drive an ACME-first customer experience allowing users of existing CAs to adopt Cloudflare with minimal tooling changes
- Partner with engineering on systems managing certificate lifecycles, key protection, HSM integration, and strict reliability requirements
- Collaborate with compliance, legal, and security teams to align with CA/Browser Forum baseline requirements, WebTrust audits, and root store policies
- Own go-to-market strategy encompassing pricing, packaging, launch sequencing, competitive positioning, and developer messaging
- Coordinate across internal product lines including SSL/TLS, Application Security, Zero Trust, Workers, and DNS
- Serve as customer zero by ensuring internal platform usage exercises the certificate authority at scale prior to full customer adoption
Requirements
- 10 or more years of product management experience building technical products for developers, security teams, infrastructure, or cloud platforms
- Background in security, identity, infrastructure, or developer platforms where reliability, compliance, and trust are core requirements
- Working knowledge of public and private PKI, TLS certificates, X.509, ACME, revocation, Certificate Transparency, mTLS, and HSMs
- Demonstrated business judgment with experience defining product strategy, pricing, packaging, and go-to-market plans for technical B2B products
- Ability to operate in ambiguity and establish structure around a new business venture
- Technical fluency regarding APIs, distributed systems, key management, operational failure modes, and security tradeoffs
- Strong written communication skills for strategy documents, product requirements, and high-stakes internal decisions
Qualifications
- Direct experience working on certificate authorities, PKI, certificate lifecycle management, cloud security, identity, or trust services
- Familiarity with platforms such as AWS Certificate Manager, AWS Private CA, Google Trust Services, DigiCert, Let's Encrypt, or HashiCorp Vault PKI
- Understanding of CA/Browser Forum requirements, browser root programs, and WebTrust baseline requirements
- Experience building API-first developer products involving ACME, SDKs, CLI workflows, Kubernetes, or service mesh
- Experience launching new businesses or zero-to-one products within a larger platform company
- Familiarity with post-quantum cryptography, crypto-agility, or Merkle Tree Certificates
- Prior participation in WebPKI, IETF, or security standards communities
Core Skills
Benefits
- Medical, dental, and vision insurance coverage
- Flexible spending accounts and commuter spending accounts
- Fertility and family forming benefits alongside on-demand mental health support and employee assistance program
- Global travel medical insurance
- Short-term and long-term disability insurance along with life and accident insurance
- 401(k) retirement savings plan and employee stock participation plan
- Flexible paid time off covering vacation and sick leave
- Leave programs including parental, pregnancy health, medical, and bereavement leave
- Eligibility to participate in Cloudflare's equity plan
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this role?
This position is full-time.
Where is the role located?
The source posting lists the location as remote, with available physical locations specified as Austin or London.
Is a salary specified in the posting?
No, the salary is not stated in the job posting.
Are there any in-person interview requirements?
Applicants who progress to the offer stage may be asked to attend an in-person interview at a Cloudflare office or hub.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.