PKI Engineering Lead (Public Key Infrastructure)

Position Title: PKI Engineering Lead (Public Key Infrastructure)

Location: Remote (Eastern Time Zone work hours)

Clearance Requirements: None (U.S. Citizenship or required)

Position Status: Full-Time | Direct Hire

Pay Rate:

• All U.S. Locations: $160,000 – $240,000 base
• NYC Metro / Washington State / California (excluding Sacramento): $175,000 – $285,000 base

Position Description:

We are seeking a PKI Engineering Lead to design, build, and operate enterprise-scale digital certificate and encryption services supporting critical security, identity, and trust capabilities across a global environment.

This role is ideal for a senior security engineer or architect with deep expertise in Public Key Infrastructure (PKI), certificate lifecycle management, Hardware Security Modules (HSMs), and encryption technologies, who also enjoys leading teams and shaping long-term technical strategy.

You will serve as both a hands-on technical leader and people manager, partnering with architecture, engineering, and operations teams to ensure highly available, secure, and scalable PKI services that support use cases such as TLS, code signing, device and user authentication, and email encryption.

Key Responsibilities:

• Lead the architecture, design, implementation, and ongoing optimization of enterprise PKI and digital certificate services
• Own end-to-end certificate lifecycle management, including issuance, renewal, revocation, validation, and automation
• Manage and evolve PKI platforms leveraging technologies such as Microsoft PKI, OCSP, HSMs, Venafi, Keyfactor, Intune Certificate Connector, and JAMF ADCS
• Act as technical lead and product owner for PKI services, developing roadmaps, standards, and best practices
• Ensure PKI solutions meet security, compliance, availability, and performance requirements
• Lead and mentor a team of engineers; support hiring, coaching, and performance development
• Partner with stakeholders across security, infrastructure, cloud, and operations to deliver reliable services at scale
• Oversee upgrades, maintenance, incident resolution, and validation testing for PKI systems
• Develop and maintain technical documentation, runbooks, and architecture diagrams
• Stay current on PKI, cryptography, certificate management, and encryption trends, proactively improving services

Required Skills & Experience:

• Bachelor’s or Master’s degree in Computer Science, Information Security, Information Systems, or a related field
• 12+ years of overall IT experience, with:
• 8+ years in Information Security
• 6+ years of hands-on PKI engineering experience
• Deep expertise in Public Key Infrastructure (PKI) and certificate-based security solutions
• Strong experience with certificate management platforms (e.g., Venafi, Keyfactor, CyberArk)
• Hands-on experience with Hardware Security Modules (HSMs) such as SafeNet or nCipher
• Experience supporting TLS, code signing, authentication, and encryption use cases
• Proficiency with PowerShell scripting and familiarity with REST APIs for automation
• Experience integrating PKI services within cloud environments (Azure and/or AWS)
• Strong understanding of security principles, cryptography, and secure system design
• Demonstrated technical leadership and people management experience
• Excellent written and verbal communication skills, with the ability to work across global teams

About Seneca Resources

At Seneca Resources, we are more than a staffing and consulting firm — we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 companies to government organizations, we connect professionals to meaningful opportunities that align with their skills, goals, and long-term career growth.

Our consultants and full-time employees enjoy competitive compensation, comprehensive health, dental, and vision benefits, 401(k) retirement plans, and the support of a dedicated recruiting and delivery team that advocates for their success.

Seneca Resources is an Equal Opportunity Employer, committed to building a diverse and inclusive workplace where all qualified candidates are encouraged to apply.