Senior PKI Engineer

• Design, implement and maintain enterprise PKI and certificate lifecycle management platforms
• Lead automation for certificate issuance, renewal, deployment, validation and governance workflows
• Develop integrations with enterprise platforms such as Service Now, SailPoint, Cyber Ark, Splunk, Azure, AWS and related security technologies
• Support public and private Certificate Authority services, trust models, certificate profiles and lifecycle standards
• Drive machine identity management capabilities across servers, applications, APIs, devices and cloud services
• Lead certificate discovery, remediation, migration and platform modernization initiatives
• Develop automation using APIs, Power Shell, Python and modern orchestration tools
• Partner with infrastructure, cloud, application and security teams to implement cryptographic solutions
• Support crypto agility and post-quantum cryptography readiness initiatives
• Support audit, regulatory and cybersecurity initiatives related to PKI and cryptography.

• 7+ years of PKI, cybersecurity, infrastructure engineering or related enterprise technology experience
• Strong knowledge of PKI, TLS, SSL, certificate authorities, HSMs, OCSP, CRL, SSH and code signing concepts
• Experience with Keyfactor, Digi Cert, Microsoft ADCS, Venafi or comparable certificate lifecycle management platforms
• Strong scripting and automation experience with Power Shell, Python, REST APIs or similar technologies
• Experience working with cloud platforms such as Azure and AWS
• Strong troubleshooting, communication, documentation and stakeholder management skills.

Demonstrates extensive experience in designing and maintaining enterprise PKI and certificate lifecycle management platforms, with strong capabilities in automation, integration, and cryptographic solutions across various environments. Proficient in scripting and automation using Power Shell and Python, with a solid understanding of cloud platforms like Azure and AWS.

• PKI Management
• Certificate Lifecycle Management
• Automation with Power Shell
• Cloud Platform Experience
• Cybersecurity Initiatives

• PKI
• TLS
• SSL
• Certificate Authorities
• HSMs
• OCSP
• CRL
• SSH
• Code Signing
• Scripting

• Troubleshooting
• Communication
• Documentation
• Stakeholder Management

• Certificate Lifecycle Management
• Crypto Agility
• Post-Quantum Cryptography
• Audit Initiatives
• Regulatory Compliance

• Keyfactor
• Digi Cert
• Microsoft ADCS
• Venafi
• Service Now
• Sail Point
• Cyber Ark
• Splunk
• Azure
• AWS