> Markdown version of [/jobs/ext/4672360-pki-security-engineer](https://www.wearedevelopers.com/jobs/ext/4672360-pki-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# PKI Security Engineer

- **Company:** ClearBridge Technology Group
- **Location:** Dallas, TX, United States
- **Experience:** Experienced
- **Salary:** $112,320 - $162,240
- **Contract:** Temporary contract
- **Skills:** Amazon Web Services, Cloud Computing, Cyber Security, Identity and Access Management, JSON, Python (Programming Language), Key Management, PCI Data Security Standards, Ping (Networking Utility), Public Key Infrastructure, X.509, Windows PowerShell, Transport Layer Security, Okta, Cyberark, Istio, Kubernetes, Information Technology, Hashicorp, Linkerd (Service Mesh), Restful APIs, ASN.1 (Abstract Syntax Notation One)
- **Published:** November 11, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9305691/pki-security-engineer

## About the Role

* 7+ years in information security or infrastructure engineering, with 4+ years hands-on enterprise PKI and 4+ years IAM engineering
 * Demonstrated experience leading a PKI migration, CA rebuild, or large-scale cryptographic uplift in a production enterprise environment
 * Deep expertise with Microsoft ADCS (or equivalent CA platform) in a multi-tier, multi-forest environment
 * Production experience with a certificate lifecycle management platform (Venafi, Keyfactor, AppViewX, or similar), including discovery and onboarding of an unmanaged estate
 * Hands-on HSM administration (Thales Luna, Entrust nShield, or cloud KMS/CloudHSM) and participation in formal key ceremonies
 * Strong command of X.509, ASN.1, TLS/mTLS, asymmetric and symmetric cryptography, hashing, and key management practices
 * Production experience administering a major IdP (Entra ID, Okta, or Ping) including federation and conditional access design
 * Automation proficiency: PowerShell plus Python; comfort with REST APIs and JSON
 * Experience supporting regulated audits (SOX, PCI DSS, HIPAA, or similar)

Preferred skills:

 * Cloud PKI and key management: Azure Key Vault / Managed HSM, AWS Private CA / ACM / KMS, GCP Certificate Authority Service
 * Workload identity: SPIFFE/SPIRE, Kubernetes cert-manager, service mesh mTLS (Istio, Linkerd)
 * Secrets and privileged access adjacency: HashiCorp Vault, CyberArk, Delinea

## Description

Our client, a real estate company in Dallas, TX, is in need of a PKI Security Engineer for an initial six-month contract. Working in a hybrid model, The Security Engineer strengthens and maintains the organization's IT infrastructure, supporting complex PKI and IAM initiatives, conducting security assessments, and developing policies, standards, and procedures. This position will modernize the client's cryptographic trust infrastructure and manage platforms governing access.

The Security Engineer will architect and execute the transition to a modern, automated, crypto-agile PKI with no disruption to production. In parallel, this role will engineer and govern the IAM platform: SSO, MFA, lifecycle automation, and access certification. This is a hands-on senior role with architectural ownership.