PKI & Certificate Automation Engineer

True Zero Technologies LLC.; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Best-in-class medical coverage

401k with company match

PTO 3 weeks + 11 holidays

Cell phone/home internet stipend

Training and certifications

Job summary

True Zero Technologies is seeking a PKI/Certificate Management Engineer to design, deploy, and maintain a secure, scalable PKI across enterprise and cloud environments. You will automate certificate issuance, manage lifecycles, and support DoD and Federal PKI integrations, CAC/PIV authentication, and zero-trust networking.

The role includes governance development for certificate policies, cryptographic standards, and integration with IAM and identity platforms, ensuring trusted communications

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Experience designing, implementing, or administering enterprise PKI.
• Knowledge of X.509 certificates, trust chains, cryptographic algorithms, key management, revocation, and lifecycle.

Responsibilities

• Design, implement, and maintain enterprise PKI across Windows, Linux, cloud, containers, and networks.
• Manage the full certificate lifecycle: request, issuance, validation, distribution, renewal, revocation, expiration, retirement.
• Implement and maintain ACME-based certificate automation and enrollment workflows.
• Manage certificates across Windows, Linux, cloud platforms, containers, applications, load balancers, and network devices.
• Design and operate integrations with AWS Private CA, AWS Certificate Manager, and related AWS services.
• Implement and administer HSM capabilities, including AWS CloudHSM.
• Support Federal PKI (FPKI) and DoD PKI trust relationships and interoperability.
• Integrate CAC/PIV authentication with enterprise applications, identity platforms, OS, and secure workflows.
• Implement and maintain mutual TLS for workload identity and Zero Trust communications.
• Ensure cryptographic implementations use FIPS-validated modules where required.
• Establish certificate discovery, inventory, monitoring, and alerting to prevent outages.
• Develop governance standards for certificate ownership, issuance, naming, key length, algorithms, renewal, revocation, retention.
• Integrate certificate management with IAM and authentication workflows.
• Support secure networking through TLS, mTLS, and encryption standards.
• Monitor PKI platform health, certificate status, and expiration events.
• Troubleshoot certificate-chain, trust-store, TLS, and enrollment issues.
• Collaborate with cybersecurity, identity, cloud, platform, and network teams.

Skills

PKI design

ACME automation

AWS Private CA

HSM (CloudHSM)

mTLS

DoD PKI

CAC/PIV

TLS configs

Governance

Education

Bachelor's degree in Cybersecurity, CS, IT

Tools

AWS Private CA

AWS CloudHSM

ACME tooling

Job description

True Zero Technologies is seeking a PKI/Certificate Management Engineer to design, deploy, and maintain a secure, scalable PKI across enterprise and cloud environments. You will automate certificate issuance, manage lifecycles, and support DoD and Federal PKI integrations, CAC/PIV authentication, and zero-trust networking.

The role includes governance development for certificate policies, cryptographic standards, and integration with IAM and identity platforms, ensuring trusted communications