PKI Engineer - Automation & Identity Management

State Street; Dublin; On-site; EUR 65,000 - 90,000; Full time

Job summary

State Street is seeking a hands-on PKI Engineer to support enterprise PKI, certificate lifecycle management and machine identity services. You will help implement automation and platform improvements under senior PKI leadership, aiming to reduce operational friction across certificate workflows.

The ideal candidate has 3+ years in PKI or security engineering, knowledge of TLS/SSL and certificate authorities, and scripting skills (PowerShell or Python).

Qualifications

• 3+ years PKI, security engineering or infrastructure automation experience.
• Working knowledge of TLS, SSL, certificate authorities and certificate lifecycle management.
• Experience with scripting or automation using PowerShell, Python, APIs or similar tools.
• Familiarity with Windows, Linux, networking and cloud environments.
• Experience with Keyfactor, DigiCert, Microsoft ADCS or similar platforms is preferred.
• Strong troubleshooting, documentation and collaboration skills.

Responsibilities

• Support enterprise PKI and certificate lifecycle platforms.
• Develop and maintain automation for certificate issuance, renewal, reporting and remediation workflows.
• Assist integrations across ServiceNow, cloud platforms and monitoring tools.
• Support certificate discovery, inventory enrichment, ownership mapping and remediation.
• Support machine identity management and certificate deployment patterns.
• Create and maintain technical documentation, support procedures and automation runbooks.
• Assist with testing, implementation and transition of engineering changes into operations.
• Participate in incident investigation, problem management and service improvement activities.
• Support audit, compliance and risk evidence requests related to PKI and certificate management.

Skills

PowerShell scripting

Python scripting

TLS/SSL knowledge

Windows & Linux

Networking basics

Tools

Keyfactor

DigiCert

ADCS (MS)

APIs

Job description

State Street is seeking a hands-on PKI Engineer to support enterprise PKI, certificate lifecycle management and machine identity services. You will help implement automation and platform improvements under senior PKI leadership, aiming to reduce operational friction across certificate workflows.

The ideal candidate has 3+ years in PKI or security engineering, knowledge of TLS/SSL and certificate authorities, and scripting skills (PowerShell or Python).