Senior Security Operations Engineer II

Senior Security Operations Engineer Your Impact As a Senior Security Operations Engineer, you'll play a key role in ensuring the reliability, performance, and scalability of our security infrastructure. You'll solve complex technical problems, improve our systems through thoughtful automation, and work closely with cross-functional teams to support our services as they scale. You'll provide hands‑on execution capabilities for new initiatives in the Identity space, primarily to build out, maintain and support PKI solutions at scale and provide auxiliary execution support for user identity and access management initiatives. Your work will have a direct impact on uptime, efficiency, and the overall developer experience - contributing to our mission to deliver high-quality mission critical systems at speed. What You’ll Do Location: This role is based out of our Scottsdale, AZ office and follows a hybrid schedule. We rely on in-person collaboration and ask that team members work onsite Tuesdays through Fridays, with the flexibility to work remotely on Mondays, unless there is an approved workplace accommodation. We believe that connection fuels innovation, and our in-office culture is designed to foster meaningful teamwork, mentorship, and shared success. Reports to: Manager, InfoSec Engineering Direct Reports: 0 Design, deploy, and operate PKI infrastructure supporting secure authentication, encryption, and certificate lifecycle management. Manage certificates, secrets, keys, and trust stores, including issuance, renewal, rotation, and revocation. Build, maintain, and secure Kubernetes clusters hosting PKI and secret management services. Automate PKI and secret management workflows using Infrastructure-as-Code, CI/CD pipelines, and Kubernetes-native tooling. Monitor and troubleshoot PKI, certificate, secret, and Kubernetes infrastructure issues, performing root cause analysis and remediation. Collaborate with other teams to integrate PKI and secrets management into cloud-native applications and services. Maintain operational documentation, runbooks, and disaster recovery procedures for PKI and Kubernetes environments. Ensure PKI and Kubernetes platforms meet security, reliability, and compliance requirements. Build and operate secure, reliable, and scalable PKI and secrets management infrastructure. Design and implement PKI solutions supporting 24x7 production and enterprise environments. Manage certificates, secrets, encryption keys, and access controls across Kubernetes-based platforms. Deploy, maintain, and secure Kubernetes clusters hosting PKI and secret management services. Automate certificate lifecycle, secret rotation, and infrastructure operations using CI/CD and Infrastructure-as-Code. Troubleshoot and resolve PKI, certificate, secret, and Kubernetes infrastructure issues. Collaborate with SRE, platform, and security teams to integrate PKI and secrets management into cloud-native services. Participate in on-call rotations, incident response, and operational improvement initiatives. Document PKI architecture, operational procedures, and security best practices What You Bring 7+ years of experience in infrastructure, platform, SRE, or security engineering roles. Strong experience managing and securing Kubernetes clusters and containerized workloads in production environments. Hands-on experience with PKI platforms, certificate lifecycle management, secrets management, and encryption technologies. Experience operating cloud-native security solutions such as AWS KMS, Azure Key Vault, HashiCorp Vault, EJBCA, Smallstep, or Venafi. Strong understanding of Linux systems, networking, distributed systems, and Kubernetes security best practices. Experience with automation, scripting, Infrastructure-as-Code, and CI/CD pipelines for PKI and infrastructure operations. Familiarity with IAM and access management platforms such as Okta, Entra ID, Keycloak, or similar solutions. Experience with monitoring, logging, alerting, and troubleshooting distributed infrastructure and security systems. Strong communication and collaboration skills across engineering, operations, and security teams. Passion for building secure, scalable, and reliable infrastructure platforms. Benefits that Benefit You Competitive salary and 401k with employer match Discretionary paid time off Paid parental leave for all Medical, Dental, Vision plans Fitness Programs Emotional & Mental Wellness support Learning & Development programs And yes, we have snacks in our offices Important Notes The above job description is not intended as, nor should it be construed as, exhaustive of all duties, responsibilities, skills, efforts, or working conditions associated with this job. The job description may change or be supplemented at any time in accordance with business needs and conditions. Some roles may also require legal eligibility to work in a firearms environment. We collect personal information from applicants to evaluate candidates for employment. You may request access, deletion, or exercise other CCPA rights at View email address on click.appcast.io or via our Axon Privacy Web Form. For more information, please see the Your California Privacy Rights section of our Applicant and Candidate Privacy Notice. Equal Opportunity Employer We are an equal opportunity employer that promotes justice, advances equity, values diversity and fosters inclusion. We're committed to hiring the best talent - regardless of race, creed, color, ancestry, religion, sex (including pregnancy), national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, genetic information, veteran status, or any other characteristic protected by applicable laws, regulations and ordinances - and empowering all of our employees so they can do their best work. If you have a disability or special need that requires assistance or accommodation during the application or the recruiting process, please email View email address on click.appcast.io. Please note that this email address is for accommodation purposes only. Axon will not respond to inquiries for other purposes. #J-18808-Ljbffr