Lead Cloud Security Engineer

Smart Folks Inc; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Smart Folks Inc. is seeking a seasoned PKI Security Engineer to lead and mature our PKI program. The role focuses on strategy, governance, and operations across AWS PKI services, certificate lifecycle management, and integration with Venafi and Public PKI providers.

You will design, implement, and support PKI security solutions, review and patch Red Hat Certificate System, and collaborate with stakeholders to align with regulatory requirements and enterprise goals.

Qualifications

• Must have extensive PKI design, implementation, administration, and provisioning experience in AWS.
• Hands-on with PKI-based products and protocols (SSL/TLS, HTTPS, LDAP).
• Strong understanding of PKI standards, certificate authorities, and FP Ke y Policy Authority compliance.
• Experience automating certificate renewal and lifecycle management.
• Experience with Venafi integration and Windows/Linux server platforms.

Responsibilities

• Support and mature PKI program including strategy, governance, and operations.
• Engage with system owners and IT stakeholders to provide PKI guidance.
• Design, implement, and manage PKI security solutions.
• Review and patch Red Hat Certificate System; develop new capabilities.
• Provide PKI engineering support and troubleshooting; experience with HSM design.
• Work with OSI security concepts and monitoring in PKI context.

Skills

PowerShell

Batch scripting

Python

JSON

YAML

PKI design

AWS PKI

PKI protocols

PKI certificate authority

FPKI compliance

Venafi integration

HSM design

Mainframe encryption

Identity management

Contingency planning

Education

Bachelor’s Degree in Information Security or Computer Science

Tools

Venafi

Red Hat Certificate System

HSM design

Public PKI Providers

IBM Mainframe Encryption

Job description

Must Have Technical/Functional Skills

Good working experience with scripting platforms (PowerShell, Batch, Json, Python, YAML, etc)

• Expert in PKI design, implementation, administration, and provisioning in AWS. Extensive experience in AWS PKI services: KMS, CloudHSM, ACM, CloudFront, Secrets Manager, CloudTrail
• Experience with PKI-based products (including Web servers and certification authorities) and Common PKI-based protocols (including SSL and TLS, HTTPs, or LDAPs).
• A solid understanding of Public Key Infrastructure (PKI) including technology, standards, and implementations, with experience managing, configuring, or supporting a PKI certificate authority
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Conduct technical research and set cloud security direction and strategy
• Experience in automating certificate renewal and certificate life cycle management.
• Experience with Microsoft''s PKI Technologies and latest Windows and Linux server platforms.
• Experience with integration of Venafi with Microsoft PKI Technologies and Public PKI Providers.
• Experience on IBM Mainframe platforms Encryption (TKE, UKO, SGKLM, etc).
• Experience in areas such as identity management, provisioning, authentication, authorization, certification/governance, monitoring along, including HSPD-12 compliance.
• Experience developing and implementing IT Contingency Plans.

Must Have Technical/Functional Skills

Good working experience with scripting platforms (PowerShell, Batch, Json, Python, YAML, etc)

• Expert in PKI design, implementation, administration, and provisioning in AWS. Extensive experience in AWS PKI services: KMS, CloudHSM, ACM, CloudFront, Secrets Manager, CloudTrail
• Experience with PKI-based products (including Web servers and certification authorities) and Common PKI-based protocols (including SSL and TLS, HTTPs, or LDAPs).
• A solid understanding of Public Key Infrastructure (PKI) including technology, standards, and implementations, with experience managing, configuring, or supporting a PKI certificate authority
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Conduct technical research and set cloud security direction and strategy
• Experience in automating certificate renewal and certificate life cycle management.
• Experience with Microsoft''s PKI Technologies and latest Windows and Linux server platforms.
• Experience with integration of Venafi with Microsoft PKI Technologies and Public PKI Providers.
• Experience on IBM Mainframe platforms Encryption (TKE, UKO, SGKLM, etc).
• Experience in areas such as identity management, provisioning, authentication, authorization, certification/governance, monitoring along, including HSPD-12 compliance.
• Experience developing and implementing IT Contingency Plans.

Preferred Qualifications & Skills

• Bachelor’s Degree in Information Security, Computer Science, or related field.
• 5+ years of professional experience in PKI, Venafi, digital certificates management, IBM-Mainframe, Scripting and Information Security domains.
• Experience with Agile software development methodologies.
• Preferred one or more certifications: CISSP, AWS Cloud Certificates, CISM or other Cyber Security related certification.

Roles & Responsibilities

• Support and mature PKI (Public Key Infrastructure) program, including strategy, governance, implementation, operations and continuous alignment with compliance and regulatory requirements.
• Engage with system owners, business teams, and IT stakeholders in strategic discussions to provide best in class PKI security strategy and industry guidance to maximize long-term business objectives.
• High performing and self-motivated, extensive professional experience in designing, implementing and managing PKI and security solutions.
• Solid understanding of PKI concepts and security properties.
• Support PKI-based products (including Web servers and certification authorities) and Common PKI-based protocols (including SSL and TLS, HTTPs, or LDAPs).
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Review, patch, the Red Hat Certificate System source code for defects.
• Develop Red Hat Certificate System source code to implement new capability.
• Strong expertise in PKI Engineering Support and troubleshooting.
• Experience with HSM design and implementation.
• Working knowledge with OSI layer 2-7 security tactics and different kinds of attacks.