Cloud Engineer

Chevron Corporation; Houston (TX); On-site; USD 180,000 - 240,000; Full time

Job summary

Chevron Corporation seeks a senior Cloud Engineer to design, operate, and modernize enterprise PKI and cryptographic services across cloud and hybrid environments. You will enable secure certificate lifecycle management, key protection, and identity‑driven security controls to support Zero Trust adoption.

Responsibilities include PKI design and deployment, certificate lifecycle ownership, and integration with AD/Entra ID, plus phishing‑resistant authentication and post‑quantum capabilities.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field (or equivalent experience).
• 12–15 years in Identity & Access Management, PKI, or security infrastructure engineering.
• Proven experience operating large‑scale enterprise PKI environments.
• Strong understanding of cryptography, authentication, and trust models.

Responsibilities

• PKI & Certificate Services: Design, deploy, and manage enterprise PKI platforms (Microsoft ADCS, DigiCert, NDES, cloud‑integrated services).
• Own certificate lifecycle management (issuance, renewal, revocation, compliance, automation).
• Implement post‑quantum cryptography capabilities aligned to business and regulatory requirements.
• Manage HSM‑backed key protection and integration with key management systems.
• Cloud & Hybrid Identity Integration; Integrate PKI with Active Directory and Microsoft Entra ID for hybrid identity scenarios.
• Enable certificate‑based authentication for workloads, APIs, devices, VPN, and service accounts.
• Align PKI services with Azure and multi‑cloud security architectures.

Skills

PKI

HSM

Azure Entra ID

Zero Trust

ADCS

Automation

Certificate lifecycle

Education

Bachelor’s degree

Tools

DigiCert

NDES

Active Directory

Microsoft Entra ID

Job description

Total Number of Openings 1 Chevron is accepting online applications for the Cloud Engineer position through August 26, 2026, at 11:59 p.m. (Central Time).

Overview This is a senior hands‑on engineering role within Chevron’s Digital Identity organization responsible for designing, operating, and modernizing enterprise‑scale Public Key Infrastructure (PKI) and cryptographic services across cloud and hybrid environments. The role enables secure certificate lifecycle management, key protection, and identity‑driven security controls, supporting Zero Trust adoption, phishing‑resistant authentication, and protection of critical business workloads.

Responsibilities

• PKI & Certificate Services Design, deploy, and manage enterprise PKI platforms (Microsoft ADCS, DigiCert, NDES, cloud‑integrated services)
• Own certificate lifecycle management (issuance, renewal, revocation, compliance, automation)
• Implement post‑quantum cryptography capabilities aligned to business and regulatory requirements
• Manage HSM‑backed key protection and integration with key management systems
• Cloud & Hybrid Identity Integration
• Integrate PKI with Active Directory and Microsoft Entra ID for hybrid identity scenarios
• Enable certificate‑based authentication for workloads, APIs, devices, VPN, and service accounts
• Align PKI services with Azure and multi‑cloud security architectures
• Security Engineering & Zero Trust
• Implement phishing‑resistant authentication using FIDO2, PIV, and certificate‑based methods
• Support Conditional Access policies leveraging identity, device posture, and risk signals
• Advance Zero Trust maturity and continuous security posture improvement
• Privileged Access & Operational Security
• Integrate PKI with PAM solutions (e.g., Delinea) for secure service account authentication
• Support privileged access workstations and hardened admin environments
• Lead break‑glass and recovery scenarios using secure access controls
• Automation, Reliability & Operations
• Drive automation using scripting, APIs, and orchestration to reduce manual processes
• Lead disaster recovery exercises, upgrades, and PKI platform modernization
• Provide advanced engineering support, incident response, and root cause analysis
• Leadership & Stakeholder Engagement
• Serve as a PKI subject‑matter expert within Digital Identity – Protection
• Collaborate across security, cloud, and operations teams
• Mentor engineers and contribute to standards and operational excellence

Required Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, or related field (or equivalent experience)
• 12–15 years in Identity & Access Management, PKI, or security infrastructure engineering
• Proven experience operating large‑scale enterprise PKI environments
• Strong understanding of cryptography, authentication, and trust models
• Hands‑on expertise with PKI platforms, HSM, key management, automation, Active Directory, and Microsoft Entra ID

Preferred Qualifications

• Industry certifications in security or cloud (e.g., CISSP, Azure Security)
• Experience in regulated industries such as oil & gas or energy
• Knowledge of Zero Trust architecture, Conditional Access, and identity security engineering
• Familiarity with ITIL and operational processes in regulated environments

Relocation Options

Relocation will be considered.

International Considerations

Expatriate assignments will not be considered.

Visa & Sponsorship

Chevron regrets that it is unable to sponsor employment Visas or consider individuals on time‑limited Visa status for this position.

U.S. Regulatory Notice

Chevron is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, sex (including pregnancy), sexual orientation, gender identity, gender expression, national origin or ancestry, age, mental or physical disability, medical condition, reproductive health decision‑making, military or veteran status, political preference, marital status, citizenship, genetic information or other characteristics protected by applicable law.

We are committed to providing reasonable accommodations for qualified individuals with disabilities. If you need assistance or an accommodation, please email us at [e-mail].

Chevron participates in E‑Verify in certain locations as required by law.

About Chevron

Chevron Corporation is one of the world’s leading integrated energy companies. Through its subsidiaries that conduct business worldwide, the company is involved in virtually every facet of the energy industry. Chevron explores for, produces and transports crude oil and natural gas; refines, markets and distributes transportation fuels and lubricants; manufactures and sells petrochemicals and additives; generates power; and develops and deploys technologies that enhance business value in every aspect of the company’s operations. Chevron is based in Houston, Texas. More information about Chevron is available at www.chevron.com.