PKI & Encryption Engineer

HeartCentrix Solutions; United States; Presencial; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

HeartCentrix Solutions is seeking a hands-on PKI & Encryption Engineer to design, build, and support secure certificate and encryption solutions across the enterprise. You’ll automate certificate management, troubleshoot complex issues, and collaborate with engineering and security teams to ensure scalable, reliable systems.

You’ll mentor junior engineers, evaluate new technologies, and drive improvements in policies and processes, focusing on security best practices and proactive problem

Formación

• 3–5 years of related engineering experience.
• Strong experience with PKI and X.509 certificates, including TLS/SSL, CA, and certificate issuance/renewal.
• Enterprise certificate lifecycle management experience with platforms such as Keyfactor, Venafi, DigiCert, or Sectigo.
• Automation and scripting experience using PowerShell, Python, and APIs.
• Strong communications skills and ability to collaborate with engineering and security teams.

Responsabilidades

• Build, test, document, and maintain technical PKI and encryption solutions.
• Design and support PKI, certificate, and encryption solutions across enterprise environments.
• Manage and troubleshoot certificate lifecycle processes (issuance, renewal, installation, revocation).
• Automate certificate and security processes using PowerShell, Python, and APIs.
• Mentor junior engineers and drive improvements across the organization.
• Proactively identify root causes and address technical debt to improve systems.

Conocimientos

PKI

X.509

TLS/SSL

CA

Certificate issuance

Automation

PowerShell

Python

APIs

Communication

Herramientas

Keyfactor

Venafi

DigiCert

Sectigo

Microsoft ADCS

Descripción del empleo

We’re looking for a PKI & Encryption Engineer to help build, support, and improve secure certificate and encryption solutions across the organization. This role is hands‑on and will work closely with engineering and security teams to automate processes, solve technical issues, and make sure systems are secure, scalable, and reliable.

You’ll be responsible for designing and supporting PKI solutions, troubleshooting complex technical problems, automating certificate management, and helping teams follow security best practices. You’ll also have the opportunity to mentor other engineers and help drive improvements across the organization.

What You’ll Do

• Build, test, document, and maintain technical solutions, scripts, and processes.
• Design and support PKI, certificate, and encryption solutions across enterprise environments.
• Manage and troubleshoot certificate lifecycle processes, including issuance, renewal, installation, and revocation.
• Identify root causes of technical issues and lead efforts to fix recurring or systemic problems.
• Automate certificate and security processes using tools like PowerShell, Python, and APIs.
• Partner with security and engineering teams to build security into solutions early in the development process.
• Help teams identify and address technical debt and improve existing systems.
• Think ahead about scalability, performance, reliability, and security when designing solutions.
• Look for opportunities to standardize and reuse solutions across teams instead of duplicating work.
• Evaluate new technologies and build prototypes when there’s an opportunity to improve existing solutions.
• Share technical knowledge and help mentor more junior engineers.
• Identify opportunities to improve engineering processes and make delivery more efficient.

Top Requirements

• 3–5 years of related engineering experience.
• Strong experience with PKI and X.509 certificates, including:
• TLS/SSL
• Certificate Authorities (CA)
• Certificate issuance and renewal
• Enterprise certificate lifecycle management experience with platforms such as:
• Keyfactor
• Venafi
• DigiCert
• Sectigo
• Microsoft ADCS
• Strong automation and scripting experience using:
• PowerShell
• Python
• APIs
• Ability to troubleshoot complex technical problems and understand the bigger picture behind them.
• Strong communication skills and the ability to work with both engineering and security teams.

Nice to Have

Experience with any of the following is a plus:

• Keyfactor Command
• EJBCA
• HashiCorp Vault
• ACME
• F5
• NGINX
• IIS
• DevOps / Infrastructure as Code (IaC)

What We’re Looking For

Someone who is hands‑on, technically curious, and comfortable digging into complex PKI and encryption problems. You should enjoy automation, solving problems at the root cause, and finding ways to make systems more secure, scalable, and easier for engineering teams to manage.