PKI Engineer

We are seeking an experienced PKI Engineer to design, implement, and maintain enterprise Public Key Infrastructure (PKI), certificate management, and security solutions. The ideal candidate will have hands-on experience with Venafi, cryptography, encryption technologies, identity management, and infrastructure automation.

Key Responsibilities

• Manage enterprise PKI, Certificate Authorities, and certificate lifecycle processes.
• Configure and administer Venafi, including key management, RBAC, integrations, and reporting.
• Implement and maintain encryption, authentication, and data protection solutions.
• Support MFA, LDAP, OCSP, ICAM, TLS, PGP, and HSM technologies.
• Automate certificate management and infrastructure processes using Python, Bash, KSH, and PowerShell.
• Collaborate with security and infrastructure teams to improve automation, compliance, and system protection.
• Identify security vulnerabilities and support remediation.
• Design and support Linux, Windows Server, and cloud infrastructure environments.

Required Qualifications

• 10+ years of IT Infrastructure experience, including infrastructure design.
• 3+ years of experience working in a PKI environment.
• Hands-on experience with Venafi Certificate Lifecycle Management.
• Strong knowledge of Venafi key management, RBAC, workflows, and reporting.
• Experience with Certificate Authorities, MFA, LDAP, OCSP, and ICAM.
• Strong understanding of cryptography, key management, and data protection.
• Experience with TLS, PGP, PKI, and HSM.
• Knowledge of SSH keys, system security, and vulnerability remediation.
• Scripting experience with Python, Bash, KSH, or PowerShell.
• Familiarity with Agile methodologies such as Scrum and Kanban.

Preferred Qualifications

• Experience with Ansible, Puppet, or other infrastructure automation tools.
• AWS cloud experience (EC2, S3, RDS, Lambda, ALB/NLB).
• Experience with Red Hat products, Linux, and enterprise server infrastructure.
• Knowledge of IBM Identity Management (TIM/TAM).
• Experience with Dell or HP enterprise hardware.
• Background in Technical Architecture or Solutions Architecture.
• IoT device management experience.

Technical Skills

• PKI & Security: Venafi, PKI, TLS, PGP, HSM, Cryptography.
• Identity & Access: MFA, LDAP, OCSP, ICAM, RBAC, SSH.
• Scripting: Python, Bash, KSH, PowerShell.
• Cloud: AWS EC2, S3, RDS, Lambda, ALB/NLB.
• Infrastructure: Linux, Windows Server, Red Hat.
• Automation: Ansible, Puppet, CI/CD.

Interview Requirements

• An in-person interview is required. Candidates may attend at one of the following locations:
• Santa Clara, CA
• New York City, NY
• East Brunswick or Parsippany, NJ
• Reston, VA
• Frisco or Houston, TX
• Morrisville or Greensboro, NC
• Farmington Hills, MI
• Peoria, IL
• Olathe, KS