Senior PKI Security Engineer

Your OpportunityAt Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).Schwab’s Security Analytics and Operations organization protects the technology and trust services that enable secure connections across the enterprise. As a Senior PKI Security Engineer, you will help modernize Schwab’s Public Key Infrastructure platform and strengthen the provisioning, renewal, monitoring, and protection of digital certificates.You will use Cybersecurity, Data Encryption, API, and Technical Troubleshooting skills to build automation, integrations, monitoring, and operational controls that improve certificate visibility, platform resilience, and secure application onboarding. Your Problem Solving and Decision-Making skills will help resolve complex certificate, authentication, cryptographic, and trust-related issues while reducing operational risk.Working across architecture, infrastructure, cloud, DevOps, application, and security teams, you will apply Collaboration, Communication, and Adaptability to establish scalable implementation patterns, support reliable PKI services, and advance Schwab’s future-state cryptography capabilities.What you haveRequired qualifications6+ years of experience in security engineering, infrastructure engineering, PKI engineering, cryptography, software engineering, or a related technology roleHands-on experience supporting Public Key Infrastructure, Certificate Authorities, certificate lifecycle management, TLS/SSL certificates, key management, certificate chains, and enterprise trust storesExperience applying Data Encryption practices, including ciphers, certificate revocation, mutual TLS, key protection, secure certificate deployment, and troubleshootingExperience using Python, PowerShell, Java, Bash, or a comparable programming or scripting language to automate operational workExperience developing or supporting API integrations, automation, monitoring, and operational workflows in a large enterprise environmentAbility to apply Technical Troubleshooting and Problem Solving to complex certificates, authentication, cryptographic, and trust-related issuesAbility to use Communication and Collaboration when partnering with engineering, architecture, infrastructure, operations, and security stakeholdersLinux and Windows Server Administration experience Ability to participate in a rotating on-call schedule supporting a 24x7 environmentPreferred qualificationsExperience with Venafi, CyberArk Certificate Manager, Trust Protection Platform, DigiCert, Microsoft Active Directory Certificate Services, EJBCA, or a comparable certificate management platformExperience designing or supporting highly available security platforms within financial services, regulated industries, or large enterprise environmentsExperience with authentication and federation technologies, including OAuth, OpenID Connect, SAML 2.0, multifactor authentication, and Active DirectoryExperience using monitoring and observability tools for certificate discovery, expiration alerting, service health monitoring, metrics, log analysis, dashboards, and operational reportingFamiliarity with Risk Management, Regulatory Compliance, audit expectations, and security controls related to cryptography and certificate lifecycle managementWorking knowledge of Windows and Linux Operating SystemsAbility to provide Technical Leadership, mentor team members, and influence implementation patterns that improve reliability and reduce operational riskAdaptability when responding to evolving security requirements, technologies, priorities, and enterprise risksFamiliarity with post-quantum cryptography and the future direction of enterprise cryptographic servicesExperience in creating clear technical documentation and audience-focused reportingIn addition to the salary range, this role is eligible for bonus or incentive opportunities.Job SummaryRequisition ID: 2026-127441Posted Date: 8 hours ago(10/12/2026 5:32 PM)Category: TechnologySalary Range: USD $135,000.00 - $165,000.00 / YearApplication deadline: 10/21/2026Position Type: Full time