SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Cloudflare is building a public, redundant, transparent certificate authority for the Internet. As Principal Product Manager for this new venture, you will define product strategy, roadmap, customer experience, and commercial model for Cloudflare's CA business.
You will work across product, engineering, security, compliance, legal, operations, sales, marketing, and the WebPKI ecosystem to transform Cloudflare's CA from a technical commitment into a trusted, adopted product. This is an early-stage role requiring comfort with high-consequence infrastructure, deep customer discovery, ecosystem trust, compliance scrutiny, and zero-to-one product building.
Key responsibilities include:
- Define product strategy across publicly trusted certificates, certificate lifecycle automation, ACME issuance, renewal workflows, revocation, Certificate Transparency, customer controls, developer experience, and platform integrations
- Build for the whole Internet by understanding needs of developers, site owners, platform teams, SaaS providers, enterprise security teams, infrastructure operators, and partners
- Make resilience a product principle by designing requirements that fail small, reduce blast radius, support automated recovery, and enable fast certificate replacement
- Drive an ACME-first customer experience that enables easy adoption from existing free or automated CAs
- Partner closely with engineering on certificate lifecycle systems, automation, HSM integration, key protection, auditability, and strict reliability requirements
- Ensure product decisions align with CA/Browser Forum Baseline Requirements, WebTrust audits, root store policies, and public incident response expectations
- Own go-to-market strategy including packaging, pricing, launch sequencing, competitive positioning, customer segmentation, sales enablement, and adoption metrics
- Represent customer and ecosystem interests in balancing trust, transparency, uptime, security, and commercial adoption
- Work across Cloudflare product teams (SSL/TLS, Application Security, Zero Trust, Workers, Registrar, DNS, Load Balancing, SaaS, infrastructure)
- Ensure Cloudflare becomes Customer Zero, using the CA at scale to inform roadmap before customer adoption
Requirements:
- 10+ years of product management experience building technical products for developers, security teams, infrastructure teams, enterprises, or cloud platforms
- Experience with security, identity, infrastructure, or developer platform products where correctness, reliability, compliance, and trust are core requirements
- Working knowledge of PKI and certificate lifecycle management including TLS certificates, X.509, ACME, public and private CAs, revocation, Certificate Transparency, mTLS, HSMs, and enterprise certificate automation
- Strong business judgment with experience defining product strategy, pricing and packaging, customer segmentation, and go-to-market plans for technical B2B products
- Ability to operate in ambiguity and create structure around new business including market definition, customer discovery, roadmap tradeoffs, launch planning, and executive alignment
- Technical fluency with engineering teams and comfort discussing APIs, distributed systems, key management, audit trails, reliability, operational failure modes, and security tradeoffs
- Strong written communication for strategy documents, product requirements, launch narratives, customer-facing messaging, and high-stakes internal decisions
- Comfort with high-consequence work where mis-issued, mis-revoked, or unavailable certificates can become public, ecosystem-visible events
Bonus experience:
- Direct experience on certificate authority, PKI, certificate lifecycle management, cloud security, identity, or trust services products
- Experience with publicly trusted CAs, private PKI, managed certificate services, or platforms such as AWS Certificate Manager, AWS Private CA, Google Trust Services, DigiCert, Sectigo, Let's Encrypt / ISRG, Entrust, Microsoft PKI, HashiCorp Vault PKI, step-ca, or CFSSL
- Familiarity with CA/Browser Forum requirements, browser root programs, WebTrust for CAs, WebTrust Baseline Requirements, or public CA incident reporting
- Experience building API-first developer products, especially involving ACME, SDKs, CLI workflows, Kubernetes, service mesh, mTLS, or infrastructure-as-code integrations
- Experience launching new businesses or zero-to-one products inside larger platform companies
- Familiarity with certificate automation challenges from 90-day and shorter certificate lifetimes
- Familiarity with post-quantum cryptography, crypto-agility, Merkle Tree Certificates, or customer migration planning for cryptographic transitions
- Prior participation in WebPKI, IETF, browser trust, transparency, or security standards communities
