Qualys

Lead Software Engineer

India · Work style not stated · Full time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerQualys
LocationIndia
Work styleWork style not stated
Employment typeFull time
Employer posted30 Jun 2026

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Lead Software Engineer (CLM / Machine & AI Identity)

Qualys is looking for a hands-on Lead Software Engineer to help evolve CertView CLM into a unified machine, workload, and AI-agent identity platform. You will lead design and delivery of scalable cloud-security services handling 100M+ transactions and terabytes of data daily, with focus areas including SPIFFE/SPIRE, ephemeral certificates, Kubernetes/service-mesh identity, managed cloud identities, and AI-agent governance.

What You’ll Do

Lead architecture and development of next-generation CLM platform components
Build high-scale identity ingestion and processing pipelines for short-lived credentials and workload identities.
Drive roadmap delivery across ACME v2, SPIFFE/SPIRE integration, Kubernetes/service-mesh discovery.
Collaborate with Product, SRE, Security, VMDR, and TotalCloud teams to ship resilient, production-ready features.
Mentor engineers on design, performance, distributed systems, and secure coding for PKI/identity systems.

Show full description

Core Qualifications

8+ years of hands-on SaaS engineering experience in cloud environments.
Strong Java/Spring Boot expertise; solid fundamentals in distributed systems and scalable API design.
Experience with event-driven systems (Kafka/JMS), caching (Redis/Memcached), and RDBMS (Oracle preferred).
Familiarity with Docker, Kubernetes, Jenkins, and CI/CD.
Bachelor’s degree or higher in Computer Science (or related field).

Strongly Preferred Domain Experience (Any 2+)

PKI/CLM (X.509, CSR workflows, CA integrations, CRL/OCSP, HSM-backed signing)
ACME v2 / cert-manager
SPIFFE/SPIRE and workload identity models
Cloud managed identity (AWS/Azure/GCP) and OIDC federation
Service mesh & mTLS
Kubernetes controllers/operators and CRDs
NHI and AI-agent security concepts and platforms

Nice to Have

Post-quantum migration exposure
CNCF/IETF contributions (SPIRE, cert-manager, OPA, WIMSE/ACME)
Go or Rust experience for collectors/plugins/sidecars

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.