PKI Engineer

ACL Digital; Atlanta (GA); On-site; USD 110,000 - 170,000; Full time

Job summary

ACL Digital is seeking a PKI Infrastructure Engineer to ensure availability, resiliency, and lifecycle management of enterprise PKI services across applications in Atlanta.

You will automate certificate issuance, renewal, revocation, and trust store management, and integrate PKI with CI/CD pipelines and cloud services.

The role enforces security standards and supports compliance with NIST and PCI, working with security and operations teams.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, or related field (or equivalent experience).
• 3–7+ years in PKI, cybersecurity engineering, or infrastructure security.
• Hands-on experience with certificate lifecycle management.
• Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM).
• Understanding of TLS/SSL, cryptographic principles, and key management.
• Must be authorized to work in the United States.

Responsibilities

• Ensure availability, resiliency, and patching of PKI infrastructure.
• Support certificate issuance, renewal, revocation, and lifecycle management.
• Build automation for certificate lifecycle management and CI/CD integration.
• Enforce security policies and assist teams with PKI onboarding and compliance.

Skills

PKI

Cybersecurity engineering

Certificate lifecycle management

TLS/SSL knowledge

Cryptography fundamentals

Security policy enforcement

Education

Bachelor’s degree in CS/Cybersecurity or related field

High school diploma / equivalent

Tools

Venafi

DigiCert

Microsoft CA

AWS ACM

HSMs

Job description

WHAT YOU NEED TO SUCCEED (MINIMUM QUALIFICATIONS)

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
• 3–7+ years in PKI, cybersecurity engineering, or infrastructure security
• Hands-on experience with certificate lifecycle management
• Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM)
• Understanding of TLS/SSL, cryptographic principles, and key management
• Consistently prioritizes safety and security of self, others, and personal data.
• Embraces diverse people, thinking, and styles.
• Possesses a high school diploma, GED, or high school equivalency.
• Is at least 18 years of age and has authorization to work in the United States.

WHAT WILL GIVE YOU A COMPETITIVE EDGE (PREFERRED QUALIFICATIONS)

Experience with:

• HSMs and key custody operations
• Cloud certificate services (AWS, Azure)
• Knowledge of compliance frameworks (NIST, PCI-DSS, CMMC)
• Experience scaling PKI in large enterprise environments
• Familiarity with trust store management across distributed systems

YOUR RESPONSIBILITIES IN THIS ROLE:

1. PKI Infrastructure & Operations

• Ensure availability, resiliency, and patching of PKI infrastructure
• Support certificate issuance, renewal, revocation, and lifecycle management

2. Certificate Lifecycle Management

• Manage large-scale certificate environments across applications and infrastructure
• Ensure timely renewal and replacement of certificates
• Support trust store management and certificate chain integrity

3. Automation & Integration

• Build and implement automation for certificate lifecycle management
• Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications)
• Deploy and operationalize tools such as connectors and automation pipelines

4. Governance, Standards & Policy Enforcement

• Enforce security policies related to certificate usage and cryptography
• Define and maintain standards for certificate issuance, validity, and usage
• Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives)
• Partner with application and infrastructure teams to enable certificate automation
• Provide guidance and supporting tooling while ensuring clear ownership boundaries
• Assist teams with onboarding to PKI services and automation
• Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures
• Support incident response involving certificate or encryption issues
• Improve visibility and reporting for certificate health and compliance

7. Emerging Crypto & Future Readiness

• Support adoption of new cryptographic standards (e.g., post-quantum cryptography)
• Assist in modernization of PKI architecture and tooling
• Evaluate new solutions for scalability and resilience