PKI Engineer

• Public Key Infrastructure (PKI) & Encryption Engineer
• Writes, tests, and documents technical work products (e.g., code, scripts, processes) according to organizational standards and practices
• Solves technical problems and builds components/libraries with far-ranging impact
• Delivers high quality work and coaches more junior engineers on technical craftsmanship
• Conducts root cause analysis to identify systemic problems and defines and leads execution of action items to address
• Designs thoughtfully integrated systems that model organizational best practices, allowing disparate teams across product domains to deliver value with speed, scale, and reliability
• Oversees the management of technical debt in existing systems and drives opportunities to eliminate within ongoing implementations
• Consistently anticipates scaling, latency, and durability challenges and guides teams in implementation of mitigating strategies
• Partners with the security organization to incorporate security conscious practices early in the lifecycle of new systems
• Thoughtfully evaluates technical risks and guides toward practical prevention strategies
• Consistently reflects on squad delivery practices throughout their span of of influence, recommends improvements to leadership and drives their implementation
• Maintains a focus on removing the duplication of effort across teams and proactively identifies opportunities for reuse within their span of influence
• Thoughtfully measures and assesses team and identifies areas of development for individuals
• Explores emerging technologies, leads development of prototypes with little or no guidance and incorporates into architectural solutions where appropriate

Public Key Infrastructure (PKI), Cryptography, Public Key Infrastructure (PKI), Scripting (Scripting Languages), Test Plan/Schedule, Technical Writing, Product Documentation, Problem Solving Skills, Coaching, Root Cause Analysis, * PKI and X.509 certificate expertise (TLS/SSL, CA, issuance, renewal, revocation)

• Enterprise certificate lifecycle management experience (Keyfactor, Venafi, DigiCert, Sectigo, ADCS, etc.)
• Automation and scripting experience (PowerShell, Python, APIs)
• 3-5 years related experience

Nice to have:

• Keyfactor Command, EJBCA, Azure Key Vault, HashiCorp Vault, ACME, Azure/AWS, F5, NGINX, IIS, DevOps/IaC experience.