PKI Senior Security Engineer

How you'll help us Keep Climbing (overview & key responsibilities) The PKI Engineer is responsible for designing, operating, and enhancing the enterprise Public Key Infrastructure (PKI) and certificate management services. This role ensures secure authentication, encryption, and certificate lifecycle management across enterprise systems, supporting regulatory compliance and operational stability. YOUR RESPONSIBILITIES IN THIS ROLE: 1. PKI Infrastructure & Operations Maintain and operate PKI platforms, including Certificate Authorities (CAs), HSMs, and certificate management systems. Ensure availability, resiliency, and patching of PKI infrastructure. Support certificate issuance, renewal, revocation, and lifecycle management. 2. Certificate Lifecycle Management Manage large-scale certificate environments across applications and infrastructure. Ensure timely renewal and replacement of certificates. Support trust store management and certificate chain integrity. 3. Automation & Integration Build and implement automation for certificate lifecycle management. Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications). Deploy and operationalize tools such as connectors and automation pipelines. 4. Governance, Standards & Policy Enforcement Enforce security policies related to certificate usage and cryptography. Define and maintain standards for certificate issuance, validity, and usage. Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives). 5. Cross-Team Collaboration Partner with application and infrastructure teams to enable certificate automation. Provide guidance and supporting tooling while ensuring clear ownership boundaries. Assist teams with onboarding to PKI services and automation. 6. Risk Reduction & Incident Support Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures. Support incident response involving certificate or encryption issues. Improve visibility and reporting for certificate health and compliance. 7. Emerging Crypto & Future Readiness Support adoption of new cryptographic standards (e.g., post-quantum cryptography). Assist in modernization of PKI architecture and tooling. Evaluate new solutions for scalability and resilience. What you need to succeed (minimum qualifications) Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience). 3–7+ years in PKI, cybersecurity engineering, or infrastructure security. Hands‑on experience with certificate lifecycle management. Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM). Understanding of TLS/SSL, cryptographic principles, and key management. Consistently prioritizes safety and security of self, others, and personal data. Embraces diverse people, thinking, and styles. Possesses a high school diploma, GED, or high school equivalency. Is at least 18 years of age and has authorization to work in the United States. What will give you a competitive edge (preferred qualifications) Experience with HSMs and key custody operations. PKI automation (APIs, pipelines, scripting). Cloud certificate services (AWS, Azure). Knowledge of compliance frameworks (NIST, PCI-DSS, CMMC). Experience scaling PKI in large enterprise environments. Familiarity with trust store management across distributed systems. Benefits and Perks to Help You Keep Climbing Competitive salary, industry‑leading profit sharing program, and performance incentives. 401(k) with generous company contributions up to 9%. New hires are eligible for up to 2 weeks of vacation (earned in the following vacation year). Additional paid personal time (up to 56 hours in 12 months). 10 paid holidays per calendar year. Birthing parents eligible for 12 weeks of paid maternity/parental leave. Non‑birthing parents eligible for 2 weeks of paid parental leave. Comprehensive health benefits including medical, dental, vision, short/long term disability, and life insurance benefits. Family care assistance through fertility support, surrogacy and adoption assistance, lactation support, subsidized back‑up care, and programs that help with loved ones in all stages. Holistic wellbeing programs to support physical, emotional, social, and financial health, including access to an employee assistance program, free financial coaching, and extensive resources supporting mental health. Domestic and international space‑available flight privileges for employees and eligible family members. Career development programs to achieve your long‑term career goals. World‑wide partnerships to engage in community service and innovative goals created to focus on sustainability and reducing our carbon footprint. Business Resource Groups created to connect employees with common interests to promote inclusion, provide perspective, and help implement strategies. Recognition rewards and awards through the platform Unstoppable Together. Access to over 500 discounts, specialty savings and voluntary benefits through Delta perks such as car and hotel rentals, auto, home, and pet insurance, legal services, and childcare. Delta Air Lines, Inc. is an Equal Employment Opportunity / Affidavit Action employer and provides reasonable accommodation in its application process for qualified individuals with disabilities and disabled veterans. If you are a qualified individual, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings through this site, apply for jobs through Delta’s online system, or at any point in the selection process. To request a reasonable accommodation, please click here. #J-18808-Ljbffr