PKI Engineer

ReqRoute,Inc; Dallas (TX); On-site; USD 124,000 - 207,000; Full time

Job summary

ReqRoute,Inc in Dallas, TX seeks a PKI Engineer for a contract role onsite. You will lead CA management, Active Directory integration, and platform authentication across Windows and Unix, building tooling to automate PKI operations and ensure auditability.

The role requires 10+ years IT infra experience, hands-on Venafi, TLS/PKI/HSM deployment, and scripting in Python and shell. You will collaborate with Security and Infrastructure teams, develop defined workflows, and deliver both manual and

Qualifications

• Minimum 10 years in IT infrastructure roles with design experience.
• Hands-on experience with Venafi certificate lifecycle management.
• Knowledge of CA, LDAP, MFA/OCSP, and ICAM standards.
• Experience deploying TLS, PKI, and HSM solutions.
• Scripting in Python and shell (KSH Bash PowerShell).

Responsibilities

• Develop and enforce PKI processes around CA management.
• Automate PKI tooling and integrate with security platforms.
• Collaborate with Security and Infrastructure teams to drive automation.
• Produce manual and automated reporting via Venafi.
• Configure SSH keys and encryption for secure authentication.

Skills

IT infrastructure design

Python scripting

Shell scripting (KSH Bash)

PowerShell

Cross-functional collaboration

Security & compliance

Strong communicator

Certificate Authority management

Threat & risk assessment

Tools

Venafi

Ansible

Puppet

IBM TIM/TAM

Identity Management (Red Hat IdM)

Red Hat Satellite

RHDS

Ceph

AWS (EC2 S3 Lambda)

SSH key management

Job description

PKI Engineer

Location: Dallas, TX - Onsite
Employment Type: Contract, 6+ months
Work Authorization: USC / GC / C2C

Note: In-person interview required.

Role Overview

The Public Key Infrastructure Engineer is responsible for ensuring that processes and controls are developed and implemented around Certificate Authority (CA) management, Active Directory, and platform authentication (Windows and Unix). This role develops and integrates tooling to better automate and manage the PKI environment and ensure auditability across these systems. The engineer works cross-functionally with Security and Infrastructure teams to drive full integration and automation.

Required Skills & Experience

• 10+ years working in an IT infrastructure role, including associated design experience.
• Hands-on experience with Venafi (certificate lifecycle management).
• In-depth knowledge of managing keys and RBAC within Venafi.
• Well versed in integration and enrollment via defined workflows.
• Ability to produce both manual and automated reporting through Venafi.
• Working knowledge of Certification Authorities, two-factor authentication, MFA, LDAP directories, OCSP, ICAM, and the standards relating to them.
• Understanding of cryptography, key management, masking, tokenization, and other data protection technologies.
• Experience deploying encryption technologies such as TLS, PGP, PKI, and HSM.
• Understanding of SSH, particularly the configuration and use of SSH keys for authentication.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing methods.
• Experience assessing data protection approaches, requirements, and activities.
• Knowledge and experience of network and system security solutions, concepts, and technologies.
• Scripting experience with Python, along with shell scripting in KSH, Bash, and PowerShell.
• Experience with distributed platforms such as Linux; Windows Server a plus.
• Experience with continuous delivery and deployment.
• Experience working within an agile development methodology (Kanban, Scrum, etc.).
• Clear, concise communicator, comfortable working with all levels of the organization.
• Effective at collaboration and negotiation with internal stakeholders.
• Able to manage and prioritize multiple projects with competing resource requirements and timelines.

Preferred Qualifications

• 3+ years working specifically in a PKI environment.
• Demonstrated experience with infrastructure automation tooling (Ansible, Puppet).
• Experience with Identity Management solutions such as IBM TIM/TAM.
• Experience designing and implementing solutions across Red Hat products - IdM, Satellite, RHV, RHDS, Ceph.
• AWS experience including core services (EC2, S3, ALB/NLB, Lambda, RDS), and experience designing, optimizing, and troubleshooting public cloud platforms supporting large, complex application stacks.
• Experience supporting enterprise server hardware (Dell or HP).
• Experience with IoT device management.
• Prior experience as a Technical Architect, Solutions Architect, Technical Design Authority, or Solutions Designer.