Lead PKI Security Engineer

Roles and Responsibilities

• Design, implement, and maintain enterprise PKI architectures, including multi-tier Certificate Authority (CA) environments.
• Manage certificate lifecycle processes, including issuance, renewal, revocation, and inventory management.
• Administer and support PKI components such as RAs, ADCS, and HSM platforms.
• Implement and maintain secure cryptographic practices aligned with enterprise security standards.
• Develop and enhance automation solutions using tools such as Ansible, Terraform, and PowerShell.
• Support PKI infrastructure deployments, upgrades, migrations, and operational improvements.
• Troubleshoot complex PKI, certificate, and cryptographic issues across enterprise environments.
• Collaborate with security, infrastructure, and application teams to implement secure certificate solutions.
• Ensure PKI services meet security, compliance, and operational requirements.
• Provide technical leadership, guidance, and best practices for PKI and cryptographic security.

Required Qualifications

• Strong understanding of PKI concepts, certificate lifecycle management, and cryptographic principles.
• Extensive experience working with enterprise PKI environments, including multi-tier PKI architectures.
• Hands-on experience with certificate inventory management systems.
• Proven experience managing and supporting PKI technologies such as:
  • Registration Authorities (RAs)
  • Active Directory Certificate Services (ADCS)
  • Hardware Security Modules (HSMs)
• Strong Information Security experience with a focus on PKI, cryptography, and certificate security.
• Experience with automation and infrastructure-as-code tools, including:
  • Ansible
  • Terraform
  • PowerShell scripting
• Ability to analyze, troubleshoot, and resolve complex PKI and security-related issues.

Preferred Qualifications

• Professional security certifications such as CompTIA Security+, CISSP, or equivalent.
• Experience with enterprise-scale PKI operations and security governance.
• Knowledge of certificate management best practices and security compliance frameworks.
• Experience leading PKI engineering initiatives and mentoring technical teams.

Required Experience

• Proven experience as a PKI Engineer, Security Engineer, or similar role with enterprise PKI responsibilities.
• Experience supporting large-scale, security-focused infrastructure environments.
• Strong analytical, problem-solving, and communication skills.