PKI Engineer

HireOn Tech; Atlanta (GA); On-site; USD 130,000 - 190,000; Full time

Job summary

HireOn Tech in Atlanta seeks an experienced PKI and security specialist to lead design, implementation, and governance of our Public Key Infrastructure. You will work across IT and security teams to secure certificates, manage lifecycle, and ensure compliance with FP PKI policies and industry standards.

The role emphasizes automation, integration with Venafi and Microsoft PKI, and support for cloud-based PKI services (AWS KMS, ACM, CloudHSM).

Qualifications

• Bachelor's degree in Information Security, CS, or related field.
• Demonstrated experience in PKI, Venafi, digital certificate management, IBM Mainframe, scripting, and information security.
• Experience with Agile software development methodologies.
• Certifications such as CISSP, AWS Cloud Certificates, CISM preferred.
• Experience with PKI-based products and SSL/TLS, PKI standards.

Responsibilities

• Support and mature the organization's PKI program including strategy, governance, implementation, operations, and compliance alignment.
• Engage with system owners, business teams, and IT stakeholders to provide PKI security guidance.
• Develop and implement PKI security solutions and certificate lifecycle management.
• Review and remediate defects in certificate system components.
• Develop certificate system components to enable new capabilities.
• Provide PKI engineering support and troubleshooting.

Skills

Independent work

Prioritization

Agile methodologies

PKI security strategy

Education

Bachelor's degree in Information Security/CS

Tools

PowerShell

Batch scripting

JSON

Python

YAML

AWS KMS

CloudHSM

ACM

CloudFront

Secrets Manager

CloudTrail

Venafi

Microsoft PKI

Windows Server

Linux servers

LDAPS

Job description

• Good working experience with scripting platforms (PowerShell, Batch, JSON, Python, YAML, etc.).
• Expert in PKI design, implementation, administration, and provisioning in AWS. Extensive experience in AWS PKI services: KMS, CloudHSM, ACM, CloudFront, Secrets Manager, and CloudTrail.
• Experience with PKI-based products, including web servers and certification authorities, and common PKI-based protocols, including SSL and TLS, HTTPS, or LDAPS.
• A solid understanding of Public Key Infrastructure (PKI), including technology, standards, and implementations, with experience managing, configuring, or supporting a PKI certificate authority.
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Conduct technical research and set cloud security direction and strategy.
• Experience in automating certificate renewal and certificate life cycle management.
• Experience with Microsoft's PKI technologies and the latest Windows and Linux server platforms.
• Experience with integration of Venafi with Microsoft PKI technologies and public PKI providers.
• Experience with IBM Mainframe platform encryption (TKE, UKO, SGKLM, etc.).
• Experience in areas such as identity management, provisioning, authentication, authorization, certification/governance, and monitoring, including HSPD-12 compliance.
• Experience developing and implementing IT Contingency Plans.
• Preferred Qualifications & Skills
• Bachelor's Degree in Information Security, Computer Science, or a related field.
• Demonstrated professional experience in PKI, Venafi, digital certificate management, IBM Mainframe, scripting, and Information Security domains.
• Experience with Agile software development methodologies.
• Preferred one or more certifications: CISSP, AWS Cloud Certificates, CISM, or another Cyber Security-related certification.
• Support and mature the organization's PKI (Public Key Infrastructure) program, including strategy, governance, implementation, operations, and continuous alignment with compliance and regulatory requirements.
• Engage with system owners, business teams, and IT stakeholders in strategic discussions to provide best-in-class PKI security strategy and industry guidance to maximize long-term business objectives.
• Demonstrated ability to work independently, prioritize responsibilities, and design, implement, and manage PKI and security solutions.
• Solid understanding of PKI concepts and security properties.
• Support PKI-based products, including web servers and certification authorities, and common PKI-based protocols, including SSL and TLS, HTTPS, or LDAPS.
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Review and remediate defects in certificate system components.
• Develop certificate system components to implement new capabilities.
• Strong expertise in PKI engineering support and troubleshooting.
• Experience with HSM design and implementation.
• Working knowledge of OSI layer 2-7 security tactics and different kinds of attacks.