PKI & Encryption Engineer

KellyMitchell Group; Fort Worth (TX); Hybrid; USD 4,822,000 - 6,888,000; Full time

Benefits offered by this job

Medical, Dental, & Vision Insurance

ESOP / Profit Sharing

401K

Job summary

KellyMitchell Group has a Fort Worth, TX-based contract for a PKI & Encryption Engineer. This 13-week assignment offers a hybrid schedule with 3 onsite days per week.

The role emphasizes designing and maintaining enterprise PKI, managing X.509 certificates, and building automation to streamline certificate lifecycle management. Strong scripting skills and experience with major PKI platforms are required.

Qualifications

• 3+ years PKI, encryption, or information security engineering experience.
• Strong PKI and X.509 expertise including TLS/SSL, CAs, issuance, renewal, revocation.
• Experience with certificate lifecycle management platforms (Keyfactor, Venafi, DigiCert, Sectigo, ADCS).
• Hands-on automation/scripting with PowerShell, Python, APIs.

Responsibilities

• Design, support, and maintain enterprise PKI and encryption solutions.
• Manage X.509 certificates throughout the lifecycle (issuance, renewal, revocation).
• Develop scripts and automation to improve certificate lifecycle management.
• Troubleshoot complex PKI, certificate, and encryption issues.
• Design scalable, secure solutions across enterprise environments.
• Collaborate with security/tech teams to apply best practices.
• Assess risk and implement security improvements.

Skills

PKI Expertise

X.509 / TLS

Certificate Lifecycle Mgmt

Automation & Scripting

Troubleshooting PKI

Secure Enterprise Design

Tools

Keyfactor

Venafi

DigiCert

Sectigo

ADCS

PowerShell

Python

Job description

Job Summary

Our client, a leading transportation provider, is seeking a PKI & Encryption Engineer to join their team! This position is a 13-week contract located in Fort Worth, Texas, with a hybrid schedule requiring 3 days onsite per week.

Core Responsibilities

• Design, support, and maintain enterprise Public Key Infrastructure (PKI) and encryption solutions
• Manage X.509 certificates throughout the certificate lifecycle, including issuance, renewal, and revocation
• Develop scripts and automation to improve certificate lifecycle management and operational efficiency
• Conduct root cause analysis and troubleshoot complex PKI, certificate, and encryption-related issues
• Design integrated, scalable, and reliable security solutions across enterprise environments
• Partner with security and technology teams to incorporate security best practices throughout the lifecycle of systems
• Evaluate technical risks and implement practical solutions to improve security, scalability, and reliability

Required Skills/Experience (Must-Haves)

• 3+ years of related PKI, encryption, or information security engineering experience
• Strong PKI and X.509 certificate expertise, including TLS/SSL, Certificate Authorities, certificate issuance, renewal, and revocation
• Enterprise certificate lifecycle management experience using platforms such as Keyfactor, Venafi, DigiCert, Sectigo, ADCS, or similar
• Hands-on automation and scripting experience using PowerShell, Python, APIs, or similar technologies
• Experience troubleshooting complex PKI, certificate, and encryption-related technical issues
• Experience designing and supporting secure, scalable solutions in enterprise production environments

Preferred Skills/Experience (Nice-to-Haves)

• Experience with Keyfactor Command or EJBCA
• Experience with Azure Key Vault or HashiCorp Vault
• Experience with ACME protocols and certificate automation
• Experience working in Azure or AWS cloud environments
• Experience with F5, NGINX, or IIS
• Experience with DevOps and Infrastructure as Code (IaC) practices

Key Competencies & Behaviors

• Strong technical problem-solving and root cause analysis
• Security-focused mindset and attention to technical risk
• Strong cross-functional collaboration and technical communication
• Ability to design scalable, reliable, and maintainable technical solutions
• Proactive approach to automation and continuous improvement

Work Environment

Location: Fort Worth, TX

Hybrid, onsite 3 days per week

Two-round interview process consisting of one virtual interview and one onsite interview

Compensation & Benefits

Pay Range: The approximate pay range for this position is between $35.00 and $50.00 per hour. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location.

• We comply with local wage minimums
• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP) 401K offered