Cryptographic Platform Engineer (PKI & Automation)

Citizens; Johnston (RI); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Medical, dental, vision

Retirement benefits

Maternity/Paternity leave

Flexible work arrangements

Education reimbursement

Wellness programs

Job summary

Citizens is seeking a Cryptographic Engineer to implement, support, and improve cryptographic platforms with a focus on stability, automation, and risk reduction. The role intersects PKI, TLS, certificate lifecycle management, and cloud key management, including PQC readiness.

Hands-on in PKI operations, HSMs, and cryptographic tooling, contributing to automation, inventory, and secure workflows enterprise-wide.

Qualifications

• 3+ years in Information Security, PKI, Cryptography, or security engineering.
• Experience implementing or administering enterprise certificate management solutions.
• Knowledge of TLS/X.509, PKI concepts, and key management.
• Familiarity with HSMs and certificate lifecycle controls.

Responsibilities

• Support and enhance enterprise cryptographic platforms including PKI and TLS lifecycle management.
• Work with cloud key management services (AWS KMS, Azure Key Vault) and HSMs.
• Assist with cryptographic inventory, PQC readiness, and crypto-agility efforts.
• Develop and improve automation and REST API integrations for certificate/key workflows.
• Troubleshoot cryptographic service disruptions and operational issues.

Skills

Python

PowerShell

Bash

REST APIs

Troubleshooting

Tools

Venafi TLS Protect

Thales CipherTrust

Luna HSM

ServiceNow CMDB

AWS KMS

Azure Key Vault

Job description

Citizens is seeking a Cryptographic Engineer to implement, support, and improve cryptographic platforms with a focus on stability, automation, and risk reduction. The role intersects PKI, TLS, certificate lifecycle management, and cloud key management, including PQC readiness.

Hands-on in PKI operations, HSMs, and cryptographic tooling, contributing to automation, inventory, and secure workflows enterprise-wide.