Infrastructure Engineer

Brooksource; Bloomfield (CT); On-site; USD 120,000 - 150,000; Full time

Job summary

A leading tech consultancy is seeking a skilled Sr. PKI Engineer to oversee the management and maintenance of a global PKI infrastructure in a regulated environment. The ideal candidate should have extensive experience in infrastructure security and certificate authority management, along with expertise in tools like Venafi and Active Directory Certificate Services. This role includes responsibilities for automating certificate processes and ensuring compliance with cryptographic standards.

Qualifications

• 8-10+ years’ experience in infrastructure security with deep expertise in PKI and certificate authority management.
• Ability to operate in a regulated enterprise environment with high availability and compliance requirements.

Responsibilities

• Manage and maintain PKI infrastructure including certificate authorities and hardware security modules.
• Oversee certificate lifecycle operations—issuance, renewal, revocation, and automation of enterprise certificates.
• Support and maintain Active Directory Certificate Services and related Microsoft PKI components.

Skills

Infrastructure security expertise

Venafi, DigiCert, or Entrust/Centigo experience

HSMs (Hardware Security Modules)

Microsoft Active Directory Certificate Services

Scripting languages (PowerShell, Python)

TLS/SSL and encryption standards understanding

Job description

*Must be local to the East Coast. They will be looking for this person to ocassionally travel to there office in Bloomfield, CT.*

This Sr. PKI Engineer will be a member of the Infrastructure Security Engineering team responsible for managing and maintaining global PKI infrastructure.

Required Skills & Qualifications

• 8-10+ years’ experience in infrastructure security with deep expertise in PKI and certificate authority management
• Strong experience with Venafi, DigiCert or Entrust/Centigo platforms
• HSMs (Hardware Security Modules) to securely store cryptographic keys
• Microsoft Active Directory Certificate Services (ADCS)
• Management of certificate authorities and trust hierarchies
• Scripting languages (PowerShell, Python) for automation
• Deep understanding of TLS/SSL, encryption standards, and certificate lifecycle management
• Ability to operate in a regulated enterprise environment with high availability and compliance requirements

Responsibilities

• Manage and maintain PKI infrastructure, including certificate authorities (CAs) and hardware security modules (HSMs)
• Oversee certificate lifecycle operations—issuance, renewal, revocation, and automation of 57,000+ enterprise certificates
• Configure and manage Venafi (or similar tooling like DigiCert or Entrust/Centigo) for certificate orchestration and automation
• Support and maintain Active Directory Certificate Services (ADCS) and related Microsoft PKI components
• Automate certificate renewals and integrate tooling with internal applications and service management systems
• Provide subject matter expertise to developers and security engineers regarding encryption, key management, and certificate best practices
• Monitor compliance with internal policies and external standards for cryptographic management
• Troubleshoot complex PKI and certificate-related issues in production and non-production environments