PKI Senior Security Engineer

#CareersJC: 1505824Job Title: Specialist - CyberSecurityWork Location: Atlanta, Georgia(Onsite)Employment Type: Full TimeMax Salary : $110k- $130k per AnnumPKI Senior Security EngineerJob descriptionThe PKI Engineer is responsible for designing operating and enhancing the enterprise Public Key Infrastructure PKI and certificate management servicesThis role ensures secure authentication encryption and certificate life cycle management across enterprise systems supporting regulatory compliance and operational stabilityEnsure availability resiliency and patching of PKI infrastructureSupport certificate issuance renewal revocation and lifecycle managementManage large scale certificate environments across applications and infrastructureEnsure timely renewal and replacement of certificatesSupport trust store management and certificate chain integrityBuild and implement automation for certificate lifecycle managementIntegrate PKI services with enterprise platforms CI/CD pipelines cloud services applicationsDeploy and operationalize tools such as connectors and automation pipelinesEnforce security policies related to certificate usage and cryptographyDefine and maintain standards for certificate issuance validity and usageSupport compliance with regulatory frameworks eg NIST CMMC PCI TSA directivesPartner with application and infrastructure teams to enable certificate automationProvide guidance and supporting tooling while ensuring clear ownership boundariesAssist teams with onboarding to PKI services and automationIdentify and remediate risks related to certificate expiration misconfiguration or trust failuresSupport incident response involving certificate or encryption issuesImprove visibility and reporting for certificate health and complianceSupport adoption of new cryptographic standards eg postquantum cryptographyAssist in modernization of PKI architecture and toolingEvaluate new solutions for scalability and resilienceQualificationsBachelors degree in Computer Science Cybersecurity or related field or equivalent experience.3-7 years in PKI cybersecurity engineering or infrastructure security.Handson experience with certificate lifecycle management.Experience with PKI toolsplatforms eg Venafi DigiCert Microsoft CA AWS ACM.Understanding of TLSSSL cryptographic principles and key management.Experience withHSMs and key custody operationsPKI automation APIs pipelines scriptingCloud certificate services AWS AzureKnowledge of compliance frameworks NIST PCIDSS CMMCExperience scaling PKI in large enterprise environmentsFamiliarity with trust store management across distributed systemsResponsibilitiesResponsible for the design testing evaluation implementation support management and deployment of security systemsdevices used to safeguard the organizations information assetsAlso responsible for analyzing the information security environment and assisting with the development of security measures to safeguard information against accidental or unauthorized modification destruction or disclosureWorks with the technical team to recover data after a security breach Configures and installs firewalls and intrusion detection systemsDevelops automation scripts to handle and track incidentsInvestigates intrusion incidents conducts forensic investigations and mounts incident responsesDelivers technical reports and formal papers on test findingsInstalls firewalls data encryption and other security measuresMaintains access by providing information resources and technical supportEnsures authorized access by investigating improper access revoking access reporting violations monitoring information requests by new programming recommending improvementsUpdates job knowledge by participating in educational opportunities reading professional publications maintaining personal networks participating in professional organizationsAccomplishes information systems and organization mission by completing related results as neededBuilds deploys and tracks security measurements for computer systems and networksMitigates security vulnerabilities by implementing applicable solutions and toolsPerforms vulnerability testing risk analyses and security assessmentsCollaborates with colleagues on authentication authorization and encryption solutionsTests security solutions using industry standard analysis criteriaResponds to information security issues during each stage of a projects lifecyclePerforms risk assessments and testing of data processing systemsEstablishes system controls by developing framework for controls and levels of access recommending improvementsEstablishes computer and terminal physical security by developing standards policies and procedures coordinates with facilities security recommends improvementsSafeguards computer files by performing regular backups developing procedures for source code management and disaster