> Markdown version of [/jobs/ext/2376428-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/2376428-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Engineer - **Company:** Chevron Corporation - **Location:** Houston, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), User Authentication, Microsoft Azure, Cloud Computing, Cloud Engineering, Cyber Security, Disaster Recovery, Hardware Security Module, Identity and Access Management, Virtual Private Networks (VPN), Key Management, Public Key Infrastructure, Azure Active Directory, Phishing, Zero Trust Network Access, Cloud Platform System, Multi-Cloud, Information Technology - **Published:** August 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=898177c3895f0ba2 ## About the Role * Bachelor's degree in computer science, Information Security, Engineering, or related field (or equivalent experience) * 12-15 years in Identity & Access Management, PKI, or security infrastructure engineering * Proven experience operating large-scale enterprise PKI environments * Strong understanding of cryptography, authentication, and trust models * Hands-on expertise with PKI platforms, HSM, key management, automation, Active Directory, and Microsoft Entra ID, * Industry certifications in security or cloud (e.g., CISSP, Azure Security) * Experience in regulated industries such as oil & gas or energy * Knowledge of Zero Trust architecture, Conditional Access, and identity security engineering * Familiarity with ITIL and operational processes in regulated environments ## Description This is a senior hands-on engineering role within Chevron's Digital Identity organization responsible for designing, operating, and modernizing enterprise-scale Public Key Infrastructure (PKI) and cryptographic services across cloud and hybrid environments. The role enables secure certificate lifecycle management, key protection, and identity-driven security controls, supporting Zero Trust adoption, phishing-resistant authentication, and protection of critical business workloads. Responsibilities for this position may include but are not limited to: * PKI & Certificate Services * Design, deploy, and manage enterprise PKI platforms (Microsoft ADCS, DigiCert, NDES, cloud-integrated services) * Own certificate lifecycle management (issuance, renewal, revocation, compliance, automation) * Implement post-quantum cryptography capabilities aligned to business and regulatory requirements * Manage HSM-backed key protection and integration with key management systems * Cloud & Hybrid Identity Integration * Integrate PKI with Active Directory and Microsoft Entra ID for hybrid identity scenarios * Enable certificate-based authentication for workloads, APIs, devices, VPN, and service accounts * Align PKI services with Azure and multi-cloud security architectures * Security Engineering & Zero Trust * Implement phishing-resistant authentication using FIDO2, PIV, and certificate-based methods * Support Conditional Access policies leveraging identity, device posture, and risk signals * Advance Zero Trust maturity and continuous security posture improvement * Privileged Access & Operational Security * Integrate PKI with PAM solutions (e.g., Delinea) for secure service account authentication * Support privileged access workstations and hardened admin environments * Lead break-glass and recovery scenarios using secure access controls * Automation, Reliability & Operations * Drive automation using scripting, APIs, and orchestration to reduce manual processes * Lead disaster recovery exercises, upgrades, and PKI platform modernization * Provide advanced engineering support, incident response, and root cause analysis * Leadership & Stakeholder Engagement * Serve as a PKI subject matter expert within Digital Identity - Protection * Collaborate across security, cloud, and operations teams * Mentor engineers and contribute to standards and operational excellence ## Related Videos - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)