PKI Automation Engineer: Lifecycle & Machine Identity

State Street; Austin (TX); On-site; USD 90,000 - 157,500; Full time

Job summary

State Street is seeking a hands-on PKI Engineer to support enterprise PKI, certificate lifecycle management, and machine identity services. You will develop automation, build integrations, and reduce operational friction across certificate workflows in a complex enterprise environment.

You will collaborate with security, operations, and IT teams to maintain PKI platforms, implement automation, and document runbooks and procedures to ensure reliable identity services and compliance across cloud

Qualifications

• 3+ years of PKI, security engineering, infrastructure automation or related technology experience.
• Working knowledge of TLS, SSL, certificate authorities, certificate lifecycle management.
• Experience with scripting or automation using PowerShell, Python, APIs or similar tools.
• Familiarity with Windows, Linux, networking and cloud environments.
• Experience with Keyfactor, DigiCert, Microsoft ADCS or similar platforms is preferred.
• Strong troubleshooting, documentation and collaboration skills.

Responsibilities

• Support engineering and maintenance of enterprise PKI and certificate lifecycle management platforms.
• Develop and maintain automation for certificate issuance, renewal, reporting and remediation workflows.
• Assist with integrations across ServiceNow, cloud platforms, monitoring tools and enterprise security systems.
• Support certificate discovery, inventory enrichment, ownership mapping and remediation activities.
• Support machine identity management and certificate deployment patterns across infrastructure and application teams.
• Create and maintain technical documentation, support procedures and automation runbooks.
• Assist with testing, implementation and transition of engineering changes into operations.
• Participate in incident investigation, problem management and service improvement activities.
• Support audit, compliance and risk evidence requests related to PKI and certificate management.

Skills

Ownership mindset

Automation focus

Risk reduction

Clear communication

Hands-on PKI

Tools

PowerShell

Python

APIs

Windows

Linux

Cloud platforms

Job description

State Street is seeking a hands-on PKI Engineer to support enterprise PKI, certificate lifecycle management, and machine identity services. You will develop automation, build integrations, and reduce operational friction across certificate workflows in a complex enterprise environment.

You will collaborate with security, operations, and IT teams to maintain PKI platforms, implement automation, and document runbooks and procedures to ensure reliable identity services and compliance across cloud