PKI Automation Engineer

Overview

We are seeking a highly skilled Cybersecurity Engineer with deep expertise in PKI, TLS certificate management, and cryptographic technologies. This role is critical in delivering secure automation systems and tools to mitigate cyber-attack risks, ensuring compliance, and driving technical innovation across our enterprise environment.

Key Responsibilities

• Deliver moderately complex tools and systems to reduce cyber-attack risks.
• Protect system boundaries and secure sensitive data.
• Collaborate with peer teams and foster cross-team partnerships.
• Operate independently within a structured environment, taking initiative when needed.
• Troubleshoot issues in Windows Server (2022) and RHEL/Unix environments.
• Work closely with Engineering, Deployment, and Operations teams to drive design adoption.
• Manage vendor relationships and coordinate across industry facets.
• Make engineering design decisions and implement technical automated solutions.

Required Qualifications

• 5 years of experience in information security technology, specifically in cybersecurity.
• Expertise in PKI, TLS certificate management, and software development life cycles.
• Strong knowledge of cryptographic/encryption technologies (symmetric/asymmetric cryptography, digital signing, certificate authority).
• Extensive experience creating automation scripts and communicating solutions; proficiency in PowerShell or C#.
• Hands-on experience with CI/CD pipeline implementations.
• Familiarity with code signing and securing cloud-based applications.
• Understanding of security compliance requirements (PCI, SOX).
• Ability to create detailed technical presentations and process documentation.
• Strong analytical, reasoning, and organizational skills.
• Excellent verbal and written communication.
• Proven ability to manage multiple priorities in a fast-paced environment.
• Adaptability to changing requirements and ambiguity.
• Ability to influence and align others to a technical vision.
• Self-starter with motivation and curiosity to create processes with minimal guidance.

Preferred Qualifications

• Experience with Venafi or similar TLS certificate management solutions, including backend engineering, patching, and upgrades.
• Skilled in troubleshooting certificate provisioning issues and managing Venafi configurations.
• Ability to create/update Ansible Tower/AAP/OpenSource playbooks.
• Experience with AWS and/or Azure serverless offerings.
• Familiarity with deploying containerized applications.
• Proficient in Linux-based operating systems.