Sr PKI Engineer || Remote

Job Summary

Seeking a Senior PKI Engineerto implement, operate, and maintain enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) services supporting a global, cloud-based environment. This role combines hands-on PKI administration with automation, cloud infrastructure, application security, and DevSecOps practices.

The ideal candidate will have strong experience administering PKI/CLM platforms, automating certificate and security processes through APIs, scripting, and Infrastructure as Code (IaC), and supporting cloud-native environments.

Key Responsibilities

• Administer and maintain enterprise PKI and Certificate Lifecycle Management (CLM)platforms and services.
• Manage certificate issuance, renewal, revocation, recovery, and lifecycle processes.
• Coordinate Certificate Authority (CA) lifecycle activities, including renewals, migrations, and key ceremonies.
• Develop and automate PKI governance processes and security controls using scripts, APIs, and Infrastructure as Code.
• Build and maintain cloud infrastructure supporting application security and PKI services.
• Develop and maintain certificate policies, security standards, operating procedures, and governance controls.
• Partner with software development and operations teams to integrate PKI and certificate management into development workflows.
• Support cloud-native environments utilizing CI/CD pipelines, cloud compute, Docker, and Kubernetes.
• Communicate security findings and work with technical teams through remediation.
• Guide development teams on application security and secure development best practices.

Required Experience

• 5+ years of professional experience in software engineering, security engineering, infrastructure, or a related technical field.
• Hands-on experience administering PKI and Certificate Lifecycle Management platforms.
• Strong understanding of digital certificates, Certificate Authorities, certificate lifecycle processes, and enterprise PKI operations.
• Hands-on experience with enterprise infrastructure, including:
• Windows and Linux servers
• Active Directory
• Networking appliances and infrastructure
• Experience developing automation using:
• APIs
• Scripting
• Infrastructure as Code (IaC)
• Experience with cloud-native application development and operations.
• Experience working with CI/CD pipelines, cloud compute infrastructure, Docker, and Kubernetes.
• Strong understanding of software/application security practices and security governance.
• Ability to independently troubleshoot complex security and infrastructure issues in production environments.
• Strong communication skills with experience partnering with development, operations, infrastructure, and security teams.