Andrew Kavanagh

I lead engineering for Salesforce’s cryptographic and PKI (Public Key Infrastructure) systems, directing the company’s cryptographic vision. My work centers on the technology that keeps digital communication private and authenticated, from certificate lifecycle management to secure client-server connections. I hold a BSc in Cyber Security and Digital Forensics, which grounds my approach to the practical, real-world challenges of securing a SaaS platform at scale. I am also responsible for hosting webinars to 1000s of customers to help them prepare for industry changes.

My focus is applied cryptography, PKI, certificate management, HSMs (Hardware Security Modules) , Post Quantum Cryptography and mTLS. I write and speak about how organizations should evolve from manual to automated certificate management in the era of short-lived certificates, and I’ve published Salesforce Engineering blog posts explaining cryptography fundamentals and how to secure Salesforce environments as certificate practices modernize industry-wide. Internally, I’ve led major initiatives around certificate lifetime reduction, mTLS/dual-usage certificate deprecation, and modernizing internal PKI tooling and onboarding alongside multiple other cryptographic initiatives.

Adventuring around the world with my wife, going to concerts and spending a lot of time behind a drum set. I have been playing drums since I was 10 years old.