PKI Engineer

We are looking for a PKI and Encryption Engineer with strong experience in enterprise certificate management, X.509 certificates, TLS/SSL, certificate authorities, and automation. The selected candidate will help design, maintain, and improve secure PKI solutions used across the organization. This person will work on certificate lifecycle management, automation, system integration, troubleshooting, root cause analysis, and security-focused engineering practices. Required:

• 3 5 years of experience in PKI, encryption, certificate management, or related security engineering.
• Strong knowledge of PKI and X.509 certificates.
• Experience with TLS/SSL, certificate authorities, certificate issuance, renewal, and revocation.
• Enterprise certificate lifecycle management experience.

• Experience with one or more certificate management platforms, such as:

• Keyfactor
• Venafi
• DigiCert
• Sectigo
• Microsoft ADCS
• Strong scripting and automation experience using PowerShell, Python, or similar tools.
• Experience working with APIs and integrating security tools or platforms.
• Strong troubleshooting, problem-solving, and root cause analysis skills.
• Ability to write technical documentation and maintain high-quality work products.

Preferred:

• Experience with Keyfactor Command.
• Experience with EJBCA.
• Knowledge of Azure Key Vault or HashiCorp Vault.
• Experience with ACME protocol.
• Experience with Azure or AWS security services.
• Experience with F5, NGINX, or IIS.
• Experience with DevOps, CI/CD, Infrastructure as Code, or cloud automation.
• Experience integrating certificate management with application and infrastructure platforms.