Pki Security Engineer

• Good working experience with scripting platforms (PowerShell, Batch, JSON, Python, YAML, etc.).
• Expert in PKI design, implementation, administration, and provisioning in AWS. Extensive experience in AWS PKI services: KMS, CloudHSM, ACM, CloudFront, Secrets Manager, and CloudTrail.
• Experience with PKI-based products, including web servers and certification authorities, and common PKI-based protocols, including SSL and TLS, HTTPS, or LDAPS.
• A solid understanding of Public Key Infrastructure (PKI), including technology, standards, and implementations, with experience managing, configuring, or supporting a PKI certificate authority.
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Conduct technical research and set cloud security direction and strategy.
• Experience in automating certificate renewal and certificate life cycle management.
• Experience with Microsoft’s PKI technologies and the latest Windows and Linux server platforms.
• Experience with integration of Venafi with Microsoft PKI technologies and public PKI providers.
• Experience with IBM Mainframe platform encryption (TKE, UKO, SGKLM, etc.).
• Experience in areas such as identity management, provisioning, authentication, authorization, certification/governance, and monitoring, including HSPD-12 compliance.
• Experience developing and implementing IT Contingency Plans.
• Preferred Qualifications & Skills
• Bachelor’s Degree in Information Security, Computer Science, or a related field.
• Demonstrated professional experience in PKI, Venafi, digital certificate management, IBM Mainframe, scripting, and Information Security domains.
• Experience with Agile software development methodologies.
• Preferred one or more certifications: CISSP, AWS Cloud Certificates, CISM, or another Cyber Security-related certification.

Roles & Responsibilities

• Support and mature the organization’s PKI (Public Key Infrastructure) program, including strategy, governance, implementation, operations, and continuous alignment with compliance and regulatory requirements.
• Engage with system owners, business teams, and IT stakeholders in strategic discussions to provide best-in-class PKI security strategy and industry guidance to maximize long-term business objectives.
• Demonstrated ability to work independently, prioritize responsibilities, and design, implement, and manage PKI and security solutions.
• Solid understanding of PKI concepts and security properties.
• Support PKI-based products, including web servers and certification authorities, and common PKI-based protocols, including SSL and TLS, HTTPS, or LDAPS.
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Review and remediate defects in certificate system components.
• Develop certificate system components to implement new capabilities.
• Strong expertise in PKI engineering support and troubleshooting.
• Experience with HSM design and implementation.
• Working knowledge of OSI layer 2-7 security tactics and different kinds of attacks.

Salary Range-$100,000-$120,000 a year #LI-KR3 TCS Employee Benefits Summary: Discretionary Annual Incentiv e. Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans. Family Support: Maternal & Parental Leaves. Insurance Options: Auto & Home Insurance, Identity Theft Protection. Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.a Time Off: Vacation, Time Off, Sick Leave & Holidays. Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.