PKI Engineer

Primary Responsibilities Design, implement, and maintain PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and CRL/OCSP services Manage end-to-end certificate lifecycle processes, including enrollment, issuance, renewal, and revocation Develop automation solutions using Ansible, Terraform, and PowerShell to streamline PKI operations Troubleshoot complex PKI, TLS/SSL, and certificate-related issues across enterprise systems Monitor PKI system health, ensure high availability, and support disaster recovery planning and execution Implement and enforce security controls, policies, and regulatory compliance requirements Collaborate with security, infrastructure, and application teams to support secure system integration Contribute to PKI strategy, architecture improvements, and operational best practices Mentor junior engineers and provide technical guidance within the team Required Qualifications Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field Strong hands‑on experience with PKI platforms, including Certificate Lifecycle Management (CLM) systems, Certificate Authorities, and Hardware Security Modules (HSMs) Experience with infrastructure automation tools such as Ansible, Terraform, and PowerShell Deep understanding of TLS/SSL protocols, X.509 certificates, and CRL/OCSP mechanisms Proven experience troubleshooting PKI environments and resolving complex certificate-related issues Preferred Qualifications Experience working in large-scale, enterprise PKI environments Knowledge of PKI governance, risk management, and compliance frameworksFamiliarity with mutual TLS (mTLS) and emerging cryptographic trends such as post-quantum cryptography (PQC) Relevant certifications such as Security+ or CISSP Core Competencies Strong analytical and problem‑solving abilities High attention to detail, especially in certificate and identity lifecycle management Excellent communication and cross‑functional collaboration skills Ability to operate effectively in a fast‑paced, regulated environment Continuous learning mindset with interest in evolving cryptographic standards #J-18808-Ljbffr