Associate - PKI Engineering
The Fountain Group
Dallas, United States of America
9 days ago
Role details
Contract type
Temporary to permanent Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
English Experience level
SeniorJob location
Dallas, United States of America
Tech stack
Build Automation
Computer Security
Disaster Recovery
Information Systems Security Architecture Professional
Key Management
Public Key Infrastructure
X.509
Powershell
Ansible
Transport Layer Security
Information Technology
Terraform
Job description
- 11-month assignment, possibility of extension based on performance and budget.
- Hybrid, standard business hours.
- Position plays a critical role in designing, operating, and evolving enterprise-scale Public Key Infrastructure (PKI) environments. This individual helps define and enforce secure architectures across Certificate Authorities (CAs), Registration Authorities (RAs), and hardware-backed key management platforms.
- The Senior Associate leads and contributes to the implementation and lifecycle management of PKI components, ensuring the integrity, availability, and trustworthiness of cryptographic services. Their work directly strengthens the organization's security posture and supports modernization and compliance initiatives.
- Design, implement, and maintain PKI infrastructure including CAs, RAs, CRL/OCSP services.
- Manage certificate lifecycle (enrollment, issuance, renewal, revocation).
- Build automation using Ansible, Terraform, and PowerShell.
- Troubleshoot complex PKI and TLS-related issues.
- Monitor system health and support disaster recovery.
- Enforce security controls and compliance.
- Collaborate across security, infrastructure, and application teams.
- Mentor junior engineers and contribute to PKI strategy.
Requirements
- Bachelor's degree in Computer Science, IT, Cybersecurity, or related field required.
- Public Key Infrastructure (PKI) engineering experience.
- Strong experience/knowledge in PKI platforms and Certificate Authorities (CAs), Registration Authorities (RAs), and hardware-backed key management platforms.
- Experience with Ansible, Terraform, and PowerShell.
- Deep understanding of TLS/SSL, X.509 certificates, and CRL/OCSP.
- Proven PKI troubleshooting and problem-solving skills.