Senior Software Engineer (Public Key Infrastructure) @ NETLOCK Kft.

NETLOCK's certificate authority is the system behind every qualified certificate we issue - the platform that decides what a signature is actually worth. It has recently been modernised and now runs on Kubernetes. You'll own where it goes from here: the architecture, the reliability, and the cryptographic stack it's built on. This is a backend role, written in C, Go and Perl. We don't expect all three on day one - we expect real strength in one and a genuine willingness to work across the rest. You'll develop the CA system and the independent services around it, work directly with hardware security modules and the interfaces connecting them to our services, and make architectural decisions in a system where correctness is the product. There is some web-related work, but it isn't the focus. You'll join a small, senior-leaning team that owns what it ships, from design through production. Cryptography and PKI (Public Key Infrastructure) experience is welcome, but it isn't a prerequisite: the domain is learnable, and we'll help you get there. What we can't teach is the appetite for taking long-term responsibility for a system rather than just delivering features into it.

• Have senior-level software engineering experience, primarily in backend development, with a minimum of 3–5 years in production.
• Are strong in at least one of C, Go or Perl, and genuinely willing to learn and work in all three.
• Have experience with relational databases (we use MySQL).
• Have designed and operated systems made up of multiple independent services, and keep them correct across service boundaries.
• Take long-term responsibility for a system rather than just delivering features into it.
• Are fluent with AI-assisted coding workflows.
• Pick up new languages and unfamiliar domains quickly, and find hard problems satisfying rather than draining.
• Are a native Hungarian speaker (spoken and written) with professional English.

It’s a plus if you...

• Bring cryptography or PKI knowledge of any kind - it isn't a prerequisite, but we're glad to see it.
• Have worked with OpenSSL, hardware crypto devices, or PKCS#11.
• Are at home with Kubernetes and its surrounding tooling.
• Have built CI/CD pipelines end to end, from build to deployment across Dev, Staging and Prod.
• Have a background in a regulated, security-critical domain (e.g. eIDAS, trust services, finance).
• Are open to picking up new scripting languages.

NETLOCK's certificate authority is the system behind every qualified certificate we issue - the platform that decides what a signature is actually worth. It has recently been modernised and now runs on Kubernetes. You'll own where it goes from here: the architecture, the reliability, and the cryptographic stack it's built on. This is a backend role, written in C, Go and Perl. We don't expect all three on day one - we expect real strength in one and a genuine willingness to work across the rest. You'll develop the CA system and the independent services around it, work directly with hardware security modules and the interfaces connecting them to our services, and make architectural decisions in a system where correctness is the product. There is some web-related work, but it isn't the focus. You'll join a small, senior-leaning team that owns what it ships, from design through production. Cryptography and PKI (Public Key Infrastructure) experience is welcome, but it isn't a prerequisite: the domain is learnable, and we'll help you get there. What we can't teach is the appetite for taking long-term responsibility for a system rather than just delivering features into it.

,[Own the PKI services end to end - architecture, development, maintenance, and how they behave in production., Develop the certificate authority system and the independent services around it., Keep the cryptographic stack current and lead upgrades to supported, long-term versions., Work directly with hardware security modules and the interfaces connecting them to our services., Make architectural decisions in a security-critical system and see them through to production., Improve how we build, test, and ship - from local development to deployment., Ship what you build and keep it healthy: observability, alerting, and a hand in on-call.] Requirements: C, Go, Perl, PKI Additionally: Sport subscription, Private healthcare, Free coffee, Bike parking, Shower, Modern office.