Lead PKI Security Engineer

Veriipro; Boston (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

Veriipro in Boston is seeking a PKI Engineer to design, implement, and maintain enterprise PKI architectures, including multi-tier CA environments. You will manage certificate lifecycles, issue, renew, revoke, and inventory certificates, and administer RAs, ADCS, and HSMs.

You will develop automation using Ansible, Terraform, and PowerShell, support deployments and migrations, and collaborate with security and infrastructure teams to ensure secure, compliant PKI operations.

Qualifications

• Strong understanding of PKI concepts, certificate lifecycle management, and cryptographic principles.
• Experience with enterprise PKI environments, multi-tier PKI architectures.
• Hands-on experience with certificate inventory systems and PKI technologies: RAs, ADCS, HSMs.
• Security-focused background with PKI, cryptography, and certificate security.
• Experience with automation and IaC tools: Ansible, Terraform, PowerShell.

Responsibilities

• Design, implement, and maintain enterprise PKI architectures and multi-tier CA environments.
• Manage certificate lifecycle processes: issuance, renewal, revocation, inventory.
• Administer PKI components: RAs, ADCS, HSMs.
• Develop automation using Ansible, Terraform, and PowerShell.
• Support deployments, upgrades, migrations, and improvements; troubleshoot PKI issues.

Skills

PKI concepts

Cryptography

Troubleshooting

Automation

Analytical thinking

Communication

Education

Bachelor's degree in CS/Engineering or equivalent

Tools

RAs

ADCS

HSMs

Job description

Roles and Responsibilities

• Design, implement, and maintain enterprise PKI architectures, including multi-tier Certificate Authority (CA) environments.
• Manage certificate lifecycle processes, including issuance, renewal, revocation, and inventory management.
• Administer and support PKI components such as RAs, ADCS, and HSM platforms.
• Implement and maintain secure cryptographic practices aligned with enterprise security standards.
• Develop and enhance automation solutions using tools such as Ansible, Terraform, and PowerShell.
• Support PKI infrastructure deployments, upgrades, migrations, and operational improvements.
• Troubleshoot complex PKI, certificate, and cryptographic issues across enterprise environments.
• Collaborate with security, infrastructure, and application teams to implement secure certificate solutions.
• Ensure PKI services meet security, compliance, and operational requirements.
• Provide technical leadership, guidance, and best practices for PKI and cryptographic security.

Required Qualifications

• Strong understanding of PKI concepts, certificate lifecycle management, and cryptographic principles.
• Extensive experience working with enterprise PKI environments, including multi-tier PKI architectures.
• Hands-on experience with certificate inventory management systems.
• Proven experience managing and supporting PKI technologies such as:
  • Registration Authorities (RAs)
  • Active Directory Certificate Services (ADCS)
  • Hardware Security Modules (HSMs)
• Strong Information Security experience with a focus on PKI, cryptography, and certificate security.
• Experience with automation and infrastructure-as-code tools, including:
  • Ansible
  • Terraform
  • PowerShell scripting
• Ability to analyze, troubleshoot, and resolve complex PKI and security-related issues.

Preferred Qualifications

• Professional security certifications such as CompTIA Security+, CISSP, or equivalent.
• Experience with enterprise-scale PKI operations and security governance.
• Knowledge of certificate management best practices and security compliance frameworks.
• Experience leading PKI engineering initiatives and mentoring technical teams.

Required Experience

• Proven experience as a PKI Engineer, Security Engineer, or similar role with enterprise PKI responsibilities.
• Experience supporting large-scale, security-focused infrastructure environments.
• Strong analytical, problem-solving, and communication skills.