PKI Engineer

Job Title:

PKI Engineer JOB DESCRIPTION

• The Cybersecurity Services domain protects The Company from cybersecurity risks through world class security architecture, engineering, and governance practices.
• Enterprise Certification Management Services (ECMS) team under Cybersecurity Services drives and improves Public Key Infrastructure (PKI) and certificate management across the entire Company’s technology estate.
• The ECMS team partners with other Company technology teams to design and implement PKI automation and standard methodology across the company.
• The successful candidate is someone who has solid attention to detail, as well as motivation to collaborate and share their technical knowledge around automation and security standard methodologies.
• The main focus areas for the ECMS team are:
• Ensures accurate inventory of the certificates in use in our environment.
• Creates and manages automation and workflows relevant for certificate management.
• Supports technology teams across The Company for all aspects of certificate life-cycle management (Discovery, Generation, Distribution, Rotation and Revocation)

• Design processes and workflows for generation, rotation and revoking certificates.
• Document PKI and certificate management guidance for the company
• Identify automation opportunities for certificate lifecycle.
• Acts as the domain specialist to help guide and shape how certificate management services are enabled.
• Design new certificate management services, integrations, and technologies

• Bachelor's degree required with Masters, or equivalent experience preferred.
• Minimum of 5 years of related experience
• Strong Information Security experience, specifically in PKI/Cryptography (on premise or cloud)
• Solid experience with Python
• Windows PKI and ADCS
• Venafi
• Solid experience in networking fundamentals, OS (Windows/Linux) security
• Agile & Kanban methodologies
• Working knowledge of Jenkins and Chef would be a great plus.

We have openings in Dallas, Tampa and Jersey City.