Associate - PKI Engineering

The Fountain Group

Dallas, TX, United States

about 1 month ago

Apply on www.thefountaingroup.com

Prepare application

Role details

Contract type

Temporary to permanent

Employment type

Full-time (> 32 hours)

Experience level

Expert

Working hours

Regular working hours

Job source

www.thefountaingroup.com

Tech stack

Build Automation Cyber Security Disaster Recovery Information Systems Security Architecture Professional Key Management Public Key Infrastructure X.509 Windows PowerShell Ansible Transport Layer Security Information Technology Terraform

Job description

11-month assignment, possibility of extension based on performance and budget.
Hybrid, standard business hours.
Position plays a critical role in designing, operating, and evolving enterprise-scale Public Key Infrastructure (PKI) environments. This individual helps define and enforce secure architectures across Certificate Authorities (CAs), Registration Authorities (RAs), and hardware-backed key management platforms.
The Senior Associate leads and contributes to the implementation and lifecycle management of PKI components, ensuring the integrity, availability, and trustworthiness of cryptographic services. Their work directly strengthens the organization’s security posture and supports modernization and compliance initiatives.
Design, implement, and maintain PKI infrastructure including CAs, RAs, CRL/OCSP services.
Manage certificate lifecycle (enrollment, issuance, renewal, revocation).
Build automation using Ansible, Terraform, and PowerShell.
Troubleshoot complex PKI and TLS-related issues.
Monitor system health and support disaster recovery.
Enforce security controls and compliance.
Collaborate across security, infrastructure, and application teams.
Mentor junior engineers and contribute to PKI strategy.

Requirements

Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field required.
Public Key Infrastructure (PKI) engineering experience.
Strong experience/knowledge in PKI platforms and Certificate Authorities (CAs), Registration Authorities (RAs), and hardware-backed key management platforms.
Experience with Ansible, Terraform, and PowerShell.
Deep understanding of TLS/SSL, X.509 certificates, and CRL/OCSP.
Proven PKI troubleshooting and problem-solving skills.