PKI Engineer

• Help design, build and continuously improve the clients online platform.
• Research, suggest and implement new technology solutions following best practices/standards.
• Take responsibility for the resiliency and availability of different products.
• Be a productive member of the team.

Public Key Infrastructure (PKI), Continuous Improvement, Best Practices, Information Technology & Information Systems, Amazon Web Services (AWS), Public Key Infrastructure (PKI), Public Cloud, Microsoft Active Directory, Microsoft Windows Operating System, Authentication, * 10+ years of experience in IT Infrastructure, including infrastructure design and implementation.

• 3+ years of experience working in a PKI environment; AWS Public Cloud experience is an added advantage.
• The Public Key Infrastructure (PKI) Engineer will be responsible for designing, developing, and implementing processes and controls for Certificate Authority (CA) management, Active Directory, and platform authentication across Windows and Unix environments.
• Integrate tools and automating PKI operations to ensure efficient certificate lifecycle management, security, and auditability.
• Collaborate closely with Security and Infrastructure teams to drive seamless integration, automation, and compliance across enterprise platforms.
• Hands-on experience with Certificate Lifecycle Management tools, particularly Venafi.
• In-depth knowledge of key management, Role-Based Access Control (RBAC), and Venafi administration.
• Strong understanding of certificate integration, enrollment, and management through defined workflows.
• Experience generating manual and automated reports using Venafi.
• Experience working in Agile development methodologies, including Scrum and Kanban.
• Knowledge of Continuous Integration, Continuous Delivery, and Deployment practices.
• Experience assessing data protection strategies, requirements, and implementation activities.
• Strong understanding of Certificate Authorities (CA), Two-Factor Authentication, MFA, LDAP directories, OCSP, ICAM, and related standards.
• Good knowledge of cryptography, key management, data masking, tokenization, and other data protection technologies.
• Hands-on experience with encryption technologies and protocols, including TLS, PGP, PKI, and HSM.
• Understanding of system security vulnerabilities, remediation techniques, and penetration testing principles.
• Strong knowledge of SSH, particularly SSH key configuration and authentication.
• Scripting experience with Python and shell scripting languages such as KSH, Bash, and PowerShell.
• Knowledge of network and system security solutions, concepts, and technologies.
• Experience working with distributed platforms, particularly Linux; Windows Server experience is an added advantage.
• Excellent communication, collaboration, and stakeholder management skills.
• Ability to manage and prioritize multiple projects with competing resource requirements and timelines.
• Experience with infrastructure automation and server configuration management tools such as Ansible and Puppet.
• Experience supporting enterprise server hardware, including Dell and HP.
• Knowledge of Identity Management solutions such as IBM TIM/TAM.
• Exposure to IoT devices and their management.
• Experience designing and implementing solutions using Red Hat products, including IdM (Identity Management), Satellite, RHV (Red Hat Virtualization), RHDS (Red Hat Directory Server), and Ceph.
• AWS Cloud experience with core services such as EC2, S3, ALB/NLB, Lambda, and RDS.
• Experience designing, optimizing, and troubleshooting public cloud platforms supporting large and complex application environments.
• Hands-on experience designing, implementing, and managing AWS cloud solutions.
• Previous experience in roles such as Technical Architect, Solutions Architect, Technical Design Authority, or Solutions Designer.

• A challenging, innovating environment.
• Opportunities for learning where needed.