PKI Engineer

Seeking an experienced PKI Engineer to support and enhance Delta Airlines’ Public Key Infrastructure (PKI) program. The ideal candidate will have deep expertise in AWS PKI services, certificate lifecycle management, Venafi integration, Microsoft PKI, and cloud security automation. The role involves designing, implementing, administering, and automating enterprise PKI solutions while ensuring compliance with security standards and regulatory requirements., * Design, implement, administer, and optimize enterprise PKI solutions in AWS environments.

• Manage AWS PKI services including KMS, CloudHSM, ACM, CloudFront, Secrets Manager, and CloudTrail.
• Implement and support Certificate Authorities (CA) compliant with Federal PKI (FPKI) standards.
• Automate certificate provisioning, renewal, and lifecycle management using scripting and automation tools.
• Integrate Venafi with Microsoft PKI technologies and public PKI providers.
• Support PKI-based products, web servers, certificate authorities, and secure communication protocols including SSL/TLS, HTTPS, and LDAPS.
• Review, patch, and enhance Red Hat Certificate System source code.
• Design and implement HSM solutions and encryption technologies.
• Collaborate with business and IT stakeholders to define PKI strategy, governance, and security best practices.
• Troubleshoot complex PKI infrastructure, cloud security, and certificate-related issues.

Mandatory Skills: Public Key Infrastructure (PKI), AWS KMS, AWS CloudHSM, AWS ACM, Venafi, Microsoft PKI, PowerShell, Python, AWS DevOps, SSL/TLS, Certificate Authority (CA), Cloud Security, * 8-10+ years of experience in Public Key Infrastructure (PKI) engineering and administration.

• Strong expertise in AWS PKI services including KMS, CloudHSM, ACM, CloudFront, Secrets Manager, and CloudTrail.
• Experience with Microsoft PKI Technologies and enterprise Certificate Authorities.
• Hands-on experience integrating Venafi with Microsoft PKI and public PKI providers.
• Strong scripting experience using PowerShell, Python, Batch, JSON, and YAML.
• Experience implementing Certificate Authority (CA) solutions compliant with Federal PKI (FPKI).
• Strong knowledge of SSL, TLS, HTTPS, LDAPS, and PKI protocols.
• Experience with certificate lifecycle management and certificate automation.
• Experience with AWS DevOps and cloud security automation.
• Experience with IBM Mainframe encryption technologies including TKE, UKO, and SGKLM.
• Knowledge of Identity Management, Authentication, Authorization, Provisioning, Governance, and HSPD-12 compliance.
• Experience with HSM implementation, troubleshooting, and cloud security best practices.
• Strong understanding of Windows and Linux server platforms.

PREFERRED SKILLS:

• Experience with Agile software development methodologies.
• Experience with Red Hat Certificate System development and support.
• CISSP, CISM, AWS Cloud, or other Cyber Security certifications.
• Bachelor’s Degree in Information Security, Computer Science, or related field.

GOOD TO HAVE:

• Experience developing IT Contingency Plans.
• Knowledge of OSI Layer 2-7 security architecture.
• Experience defending against network security attacks.
• Strong communication and stakeholder management skills.