PKI Engineer

VDart Inc; Dallas (TX); On-site; USD 165,000 - 248,000; Full time

Job summary

VDart Inc in Dallas, TX is seeking a PKI Engineer for a contract engagement to strengthen our certificate lifecycle management, encryption strategy, and secure key handling within CI/CD pipelines.

The ideal candidate will bring 10+ years in IT infrastructure, deep Venafi expertise, strong Python/Powershell scripting, and hands-on experience with TLS, PKI, HSM, and identity management integrations across enterprise systems.

Qualifications

• Experience with agile development methodologies (Kanban, Scrum).
• Hands-on experience with Venafi certificate lifecycle management tool.
• In-depth knowledge of managing keys and RBAC via Venafi system.
• Integration and enrollment via defined workflows.
• Manual and automated reporting through Venafi system.

Responsibilities

• Manage PKI and encryption workflows and key management across environments.
• Provide reports and metrics through Venafi and related tooling.
• Support continuous delivery and deployment processes in secure architectures.
• Assess data protection approaches, requirements, and activities.
• Collaborate with stakeholders across IT and security teams.

Skills

Agile methodology

Venafi

RBAC

Workflows

Reporting

CD/CI

Data protection

PKI/TLS/Encryption

MFA/CA

SSH keys

Python scripting

Shell scripting

Linux

Communication

Project management

IT Infrastructure

Tools

Ansible

Puppet

Identity Management tools (TIM/TAM)

Job description

Job Title: PKI Engineer

Location: Dallas, TX 75202

Duration: Contract

Required Skills and Experience:

• Working within an agile development methodology (Kanban, Scrum, etc)
• Hand-on-experience with Certificate Life Cycle Management Tool Venafi.
• In-depth knowledge of managing keys and RBAC via Venafi System.
• Well versed with integration and enrollment via defined workflows.
• Responsible for providing manual and automated reports through venafi system.
• Experience with continuous delivery and deployment.
• Experience assessing of data protection approaches, requirements, and activities.
• Certification Authorities, Two-Factor Authentication, MFA, LDAP Directories, OCSP, ICAM and the standards relating to them.
• Understanding of cryptography, key management, masking, tokenization, or other data protection technologies
• Experience utilizing and deploying encryption technologies such as TLS, PGP, PKI, and HSM
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing methods
• principles and concepts
• An understanding of SSH, especially the configuration and use of SSH keys for authentication.
• Experience with high-level script languages such as Python, along with shell scripting in KSH, Bash, and PowerShell.
• Knowledge and experience of network and system security solutions, concepts, and technologies.
• Experience with distributed platforms such as Linux. Windows server is a plus.
• Have clear and concise communication and be comfortable working with all levels in the organization
• Effective at both collaboration and negotiation with internal stakeholders.
• Capable of managing and prioritize multiple projects with competing resource requirements and timelines
• 10 yrs+ working in an IT Infrastructure related role along with associated design experience.

Preferred:

• Demonstrated experience with server configuration management (infrastructure automation) tools (i.e. - Ansible, Puppet)
• Experience supporting enterprise server hardware (Dell or HP)
• Experience with Identity Management solutions such as IBM s TIM/TAM
• Experience with IOT devices and management a plus
• Design and implement solutions for integration within client environments for various Red Hat products such as IdM (Identity Management), Satellite, RHV (Red Hat Virtualization), RHDS (Red Hat Directory Server), Ceph, etc.
• AWS Cloud experience including core services EC2, S3, ALB/NLB, Lambda, RDS
• Experience of designing, optimizing and troubleshooting public cloud platforms associated with large, complex application stacks
• 3 yrs+ working in a PKI environment and bonus points for working with AWS public cloud environments
• AWS hands on experience of designing and managing AWS cloud solutions
• Previous experience working as a either a Technical Architect, Solutions Architect, Technical Design Authority or Solutions

Designer would be preferred