PKI Engineer

Description

Senior Systems PKI Engineer - Core Responsibilities

- Administer, and support the enterprise PKI environment, including certificate lifecycle management, Venafi, Luna HSM, and related certificate platforms.

- Develop and maintain secure, scalable, and highly available PKI solutions aligned with organizational standards and long-term technology strategy.

- Monitor, analyze, and optimize PKI infrastructure through capacity planning, performance tuning, configuration management, reporting, and proactive maintenance.

- Maintain accurate PKI documentation, including certificate inventories, system configurations, architectural diagrams, operational procedures, and technical standards.

- Troubleshoot and resolve complex PKI and infrastructure issues, perform root cause analysis, and implement preventive measures to improve system reliability and stability.

- Evaluate, recommend, and support the implementation of new technologies, tools, products, and processes that enhance the PKI environment and overall operational efficiency.

- Partner with engineers, security teams, infrastructure teams, vendors, and business stakeholders to define, design, and deliver solutions that meet business and technical requirements.

- Support Windows Server, VMware, Linux/Unix, storage, and recovery technologies as they relate to the enterprise PKI platform.

- Contribute to the development and enforcement of enterprise standards, best practices, governance, and operational procedures for PKI-related technologies.

- Participate in infrastructure projects, effectively managing priorities and delivering results within cross-functional environments.

- Communicate technical concepts, recommendations, risks, and status updates clearly to technical and non-technical audiences, including leadership, end users, and vendors.

- Serve as a Senior technical resource by providing guidance, collaboration, and knowledge sharing with peers and junior team members.

- Drive continuous improvement initiatives by identifying opportunities for automation, standardization, process optimization, and operational excellence.

- Participate in on-call support and provide after-hours assistance as needed for critical production incidents and maintenance activities.

Requirements:

- 5-7+ years PKI experience, including administering, and supporting the enterprise PKI environment

* Experience with Venafi

- Experience with monitoring, configuration management and reporting functions

- Experience maintaining certificate inventory and asset configuration documentation

- Experience responding to and resolving critical incidents by performing root cause analysis and driving strong preventive actions in remediation

- Experience assisting in defining and documenting best practices, support procedures, and standards for PKI enterprise environments.

- Ability to participate in the on-call production support rotation and occasionally be able to work hours outside of the traditional work schedule. They don't have one now but they may implement a 3 person rotation where you just need to be near your phone.

- Excellent oral and written communications skills. Ability to present and explain technical information to diverse types of audiences (management, users, vendors, technical staff) in a way that establishes rapport, persuades others, and gains understanding. Ability to write clear proposals and technical documents.

- Strong interpersonal skills at all levels of management and ability to motivate employees/teams to apply skills and techniques to solve dynamic problems; excellent teamwork skills

- Effectively managing small to large projects in a cross-functional environment

- Use a strong customer focus to develop trust and work closely with various business users to guide, problem solve, and define solutions that meet user expectations, manage client expectations;

- Assist in identifying improvement opportunities, support evaluation and recommendation of tools/technologies, perform impact analyses, and facilitate innovation for the PKI enterprise environments

o Assist in conducting research and making recommendations on Windows Server / VMWARE / Unix / Linux / Storage…