Job: PKI Engineer
LOCATION Jersey City or Dallas-- must be local- 3 days onsite
DURATION 6+ month
Key Responsibilities
Design, implement, and maintain PKI infrastructure including CAs, RAs, CRL/OCSP services
Manage certificate lifecycle (enrollment, issuance, renewal, revocation)
Build automation using Ansible, Terraform, and PowerShell
Troubleshoot complex PKI and TLS-related issues
Monitor system health and support disaster recovery
Enforce security controls and compliance
Collaborate across security, infrastructure, and application teams
Mentor junior engineers and contribute to PKI strategy
Required Qualifications
Bachelor s degree in Computer Science, IT, Cybersecurity, or related field
Strong experience with PKI platforms - CLM Systems, CAs, HSMs
Experience with Ansible, Terraform, and PowerShell
Deep understanding of TLS/SSL, X.509 certificates, and CRL/OCSP
Proven PKI troubleshooting and problem-solving skills
Preferred Qualifications
Experience with enterprise-scale PKI environments
Knowledge of PKI governance and compliance
Familiarity with mTLS and cryptographic trends (e.g., PQC)
Certifications such as Security+ or CISSP