PKI Automation Engineer: Certificate Lifecycle

Datumtg; Atlanta (GA); On-site; USD 110,000 - 170,000; Full time

Job summary

Datumtg is seeking a PKI Engineer to design, operate, and enhance the enterprise Public Key Infrastructure and certificate management services. You will ensure availability, resiliency, and patching of PKI environments while handling issuance, renewal, revocation, and lifecycle processes.

The role involves managing large-scale certificate environments across applications and infrastructure, integrating PKI with CI/CD pipelines and cloud services, and enforcing cryptographic security policies.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• 3–7+ years in PKI, cybersecurity engineering, or infrastructure security.
• Hands-on experience with certificate lifecycle management.
• Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM).
• Understanding of TLS/SSL, cryptographic principles, and key management.

Responsibilities

• Design, operate, and enhance enterprise Public Key Infrastructure (PKI) and certificate management services.
• Ensure availability, resiliency, and patching of PKI infrastructure.
• Support certificate issuance, renewal, revocation, and lifecycle management.
• Manage large-scale certificate environments across applications and infrastructure.
• Ensure timely renewal and replacement of certificates.
• Support trust store management and certificate chain integrity.
• Build and implement automation for certificate lifecycle management.
• Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications).
• Deploy and operationalize tools such as connectors and automation pipelines.
• Enforce security policies related to certificate usage and cryptography.
• Define and maintain standards for certificate issuance, validity, and usage.
• Support compliance with regulatory frameworks (e.g., NIST, PCI, CMMC).
• Partner with application and infrastructure teams to enable certificate automation.
• Provide guidance and supporting tooling while ensuring clear ownership boundaries.
• Assist teams with onboarding to PKI services and automation.
• Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures.
• Support incident response involving certificate or encryption issues.
• Improve visibility and reporting for certificate health and compliance.
• Support adoption of new cryptographic standards (e.g., post-quantum cryptography).
• Assist in modernization of PKI architecture and tooling.
• Evaluate new solutions for scalability and resilience.

Skills

PKI engineering

Cybersecurity

Infrastructure security

TLS/SSL knowledge

Cryptography principles

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

Venafi

DigiCert

Microsoft CA

AWS ACM

Job description

Datumtg is seeking a PKI Engineer to design, operate, and enhance the enterprise Public Key Infrastructure and certificate management services. You will ensure availability, resiliency, and patching of PKI environments while handling issuance, renewal, revocation, and lifecycle processes.

The role involves managing large-scale certificate environments across applications and infrastructure, integrating PKI with CI/CD pipelines and cloud services, and enforcing cryptographic security policies.