PKI Engineer

Primary Responsibilities

• Design, implement, and maintain PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and CRL/OCSP services
• Manage end-to-end certificate lifecycle processes, including enrollment, issuance, renewal, and revocation
• Develop automation solutions using Ansible, Terraform, and PowerShell to streamline PKI operations
• Troubleshoot complex PKI, TLS/SSL, and certificate-related issues across enterprise systems
• Monitor PKI system health, ensure high availability, and support disaster recovery planning and execution
• Implement and enforce security controls, policies, and regulatory compliance requirements
• Collaborate with security, infrastructure, and application teams to support secure system integration
• Contribute to PKI strategy, architecture improvements, and operational best practices
• Mentor junior engineers and provide technical guidance within the team

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field
• Strong hands-on experience with PKI platforms, including Certificate Lifecycle Management (CLM) systems, Certificate Authorities, and Hardware Security Modules (HSMs)
• Experience with infrastructure automation tools such as Ansible, Terraform, and PowerShell
• Deep understanding of TLS/SSL protocols, X.509 certificates, and CRL/OCSP mechanisms
• Proven experience troubleshooting PKI environments and resolving complex certificate-related issues

Preferred Qualifications

• Experience working in large-scale, enterprise PKI environments
• Knowledge of PKI governance, risk management, and compliance frameworks
• Familiarity with mutual TLS (mTLS) and emerging cryptographic trends such as post-quantum cryptography (PQC)
• Relevant certifications such as Security+ or CISSP

Core Competencies

• Strong analytical and problem-solving abilities
• High attention to detail, especially in certificate and identity lifecycle management
• Excellent communication and cross-functional collaboration skills
• Ability to operate effectively in a fast-paced, regulated environment
• Continuous learning mindset with interest in evolving cryptographic standards

Posted By