Senior Security Operations Engineer II

Axon•Boston, MA

1d•Hybrid

About The Position

Join Axon and be a Force for Good. At Axon, we’re on a mission to Protect Life. We’re explorers, pursuing society’s most critical safety and justice issues with our ecosystem of devices and cloud software. Like our products, we work better together. We connect with candor and care, seeking out diverse perspectives from our customers, communities and each other. Life at Axon is fast-paced, challenging and meaningful. Here, you’ll take ownership and drive real change. Constantly grow as you work hard for a mission that matters at a company where you matter. Your Impact As a Senior Security Operations Engineer, you’ll play a key role in ensuring the reliability, performance, and scalability of our security infrastructure. You'll solve complex technical problems, improve our systems through thoughtful automation, and work closely with cross-functional teams to support our services as they scale. You’ll provide hands on execution capabilities for new initiatives in the Identity space, primarily to build out, maintain and support for PKI solutions at scale and provide auxiliary execution support for user identity and access management (IAM) initiatives. Your work will have a direct impact on uptime, efficiency, and the overall developer experience—contributing to our mission to deliver high-quality mission critical systems at speed.

Requirements

7+ years of experience in infrastructure, platform, SRE, or security engineering roles.
Strong experience managing and securing Kubernetes clusters and containerized workloads in production environments.
Hands-on experience with PKI platforms, certificate lifecycle management, secrets management, and encryption technologies.
Experience operating cloud-native security solutions such as AWS KMS, Azure Key Vault, HashiCorp Vault, EJBCA, Smallstep, or Venafi.
Strong understanding of Linux systems, networking, distributed systems, and Kubernetes security best practices.
Experience with automation, scripting, Infrastructure-as-Code, and CI/CD pipelines for PKI and infrastructure operations.
Familiarity with IAM and access management platforms such as Okta, Entra ID, Keycloak, or similar solutions.
Experience with monitoring, logging, alerting, and troubleshooting distributed infrastructure and security systems.
Strong communication and collaboration skills across engineering, operations, and security teams.
Passion for building secure, scalable, and reliable infrastructure platforms.

Responsibilities

Design, deploy, and operate PKI infrastructure supporting secure authentication, encryption, and certificate lifecycle management.
Manage certificates, secrets, keys, and trust stores, including issuance, renewal, rotation, and revocation.
Build, maintain, and secure Kubernetes clusters hosting PKI and secret management services.
Automate PKI and secret management workflows using Infrastructure-as-Code, CI/CD pipelines, and Kubernetes-native tooling.
Monitor and troubleshoot PKI, certificate, secret, and Kubernetes infrastructure issues, performing root cause analysis and remediation.
Collaborate with other teams to integrate PKI and secrets management into cloud-native applications and services.
Maintain operational documentation, runbooks, and disaster recovery procedures for PKI and Kubernetes environments.
Ensure PKI and Kubernetes platforms meet security, reliability, and compliance requirements.
Build and operate secure, reliable, and scalable PKI and secrets management infrastructure.
Design and implement PKI solutions supporting 24x7 production and enterprise environments.
Manage certificates, secrets, encryption keys, and access controls across Kubernetes-based platforms.
Deploy, maintain, and secure Kubernetes clusters hosting PKI and secret management services.
Automate certificate lifecycle, secret rotation, and infrastructure operations using CI/CD and Infrastructure-as-Code.
Troubleshoot and resolve PKI, certificate, secret, and Kubernetes infrastructure issues.
Collaborate with SRE, platform, and security teams to integrate PKI and secrets management into cloud-native services.
Participate in on-call rotations, incident response, and operational improvement initiatives.
Document PKI architecture, operational procedures, and security best practices