> Markdown version of [/jobs/ext/4599826-pki-security-engineer](https://www.wearedevelopers.com/jobs/ext/4599826-pki-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Pki Security Engineer

- **Company:** Tata Consultancy Services Limited
- **Location:** Atlanta, GA, United States
- **Salary:** $100,000.0 - $120,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Agile Methodology, Amazon Web Services, Amazon Cloudfront, Cloud Computing Security, Cyber Security, System Configuration, Web Servers, IBM Mainframe, Identity and Access Management, OSI Models, JSON, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), Linux Servers, Public Key Infrastructure, Windows PowerShell, YAML, Scripting, Transport Layer Security, Information Technology
- **Published:** November 6, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/88793895/1

## About the Role

* Good working experience with scripting platforms (PowerShell, Batch, JSON, Python, YAML, etc.).
 * Expert in PKI design, implementation, administration, and provisioning in AWS. Extensive experience in AWS PKI services: KMS, CloudHSM, ACM, CloudFront, Secrets Manager, and CloudTrail.
 * Experience with PKI-based products, including web servers and certification authorities, and common PKI-based protocols, including SSL and TLS, HTTPS, or LDAPS.
 * A solid understanding of Public Key Infrastructure (PKI), including technology, standards, and implementations, with experience managing, configuring, or supporting a PKI certificate authority.
 * Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
 * Conduct technical research and set cloud security direction and strategy.
 * Experience in automating certificate renewal and certificate life cycle management.
 * Experience with Microsoft's PKI technologies and the latest Windows and Linux server platforms.
 * Experience with integration of Venafi with Microsoft PKI technologies and public PKI providers.
 * Experience with IBM Mainframe platform encryption (TKE, UKO, SGKLM, etc.).
 * Experience in areas such as identity management, provisioning, authentication, authorization, certification/governance, and monitoring, including HSPD-12 compliance.
 * Experience developing and implementing IT Contingency Plans.
 * Preferred Qualifications & Skills
 * Bachelor's Degree in Information Security, Computer Science, or a related field.
 * Demonstrated professional experience in PKI, Venafi, digital certificate management, IBM Mainframe, scripting, and Information Security domains.
 * Experience with Agile software development methodologies.
 * Preferred one or more certifications: CISSP, AWS Cloud Certificates, CISM, or another Cyber Security-related certification.

Roles & Responsibilities

 * Support and mature the organization's PKI (Public Key Infrastructure) program, including strategy, governance, implementation, operations, and continuous alignment with compliance and regulatory requirements.
 * Engage with system owners, business teams, and IT stakeholders in strategic discussions to provide best-in-class PKI security strategy and industry guidance to maximize long-term business objectives.
 * Demonstrated ability to work independently, prioritize responsibilities, and design, implement, and manage PKI and security solutions.
 * Solid understanding of PKI concepts and security properties.
 * Support PKI-based products, including web servers and certification authorities, and common PKI-based protocols, including SSL and TLS, HTTPS, or LDAPS.
 * Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
 * Review and remediate defects in certificate system components.
 * Develop certificate system components to implement new capabilities.
 * Strong expertise in PKI engineering support and troubleshooting.
 * Experience with HSM design and implementation.
 * Working knowledge of OSI layer 2-7 security tactics and different kinds of attacks.