PKI Engineer

VGAI Solutions; Fort Worth (TX); Hybrid; USD 83,000 - 124,000; Full time

Job summary

VGAI Solutions seeks a Public Key Infrastructure (PKI) & Encryption Engineer in Fort Worth, TX, offering hybrid work on a long-term contract. You will write, test, and document technical work, solve problems, and mentor engineers to raise craftsmanship across systems.

Responsibilities include root-cause analyses, designing scalable secure architectures, managing technical debt, and embedding security early in lifecycles. Strong PKI, automation, and scripting skills are essential.

Qualifications

• 3–5 years of related technical experience.
• Deep knowledge of PKI and X.509 certificates, including TLS/SSL, CA issuance and revocation.
• Hands-on experience with enterprise certificate lifecycle platforms: Keyfactor, Venafi, DigiCert, Sectigo, ADCS.
• Automation and scripting using PowerShell, Python, and REST APIs.

Responsibilities

• Write, test, and document technical work products, including code, scripts, and processes, in accordance with organizational standards.
• Solve technical problems and build reusable components and libraries with broad organizational impact.
• Deliver high-quality technical work and mentor junior engineers on technical craftsmanship.
• Perform root cause analysis on systemic issues, then define and execute corrective action plans.
• Design integrated systems aligned with best practices, allowing product teams to deliver with speed, scale, and reliability.
• Manage and reduce technical debt across existing systems during ongoing implementations.
• Anticipate scaling, latency, and durability challenges, guiding teams on mitigation strategies.
• Partner with the security organization early in system lifecycles to embed security-conscious practices.
• Evaluate technical risks and guide teams toward practical prevention strategies.
• Evaluate squad delivery practices, present improvement recommendations to leadership, and drive implementation.
• Eliminate duplicated effort across teams by identifying and driving opportunities for component reuse.
• Assess team performance and identify individual development areas.
• Prototype emerging technologies independently and integrate them into architectural solutions where appropriate.

Skills

PKI & X.509

Certificate Lifecycle Mgmt

PowerShell

Python

REST APIs

Tools

Keyfactor

Venafi

DigiCert

Sectigo

ADCS

Job description

Public Key Infrastructure (PKI) & Encryption Engineer

Location & Work Model

Fort Worth, TX/ Hybrid/ Long term Contract

About the Role

Core Responsibilities

• Write, test, and document technical work products, including code, scripts, and processes, in accordance with organizational standards.


• Solve technical problems and build reusable components and libraries with broad organizational impact.


• Deliver high-quality technical work and mentor junior engineers on technical craftsmanship.


• Perform root cause analysis on systemic issues, then define and execute corrective action plans.


• Design integrated systems aligned with best practices, allowing product teams to deliver with speed, scale, and reliability.


• Manage and reduce technical debt across existing systems during ongoing implementations.


• Anticipate scaling, latency, and durability challenges, guiding teams on mitigation strategies.


• Partner with the security organization early in system lifecycles to embed security-conscious practices.


• Evaluate technical risks and guide teams toward practical prevention strategies.


• Evaluate squad delivery practices, present improvement recommendations to leadership, and drive implementation.


• Eliminate duplicated effort across teams by identifying and driving opportunities for component reuse.


• Assess team performance and identify individual development areas.


• Prototype emerging technologies independently and integrate them into architectural solutions where appropriate.

Top Requirements

• Experience: 3 to 5 years of related technical experience.


• PKI & Certificate Expertise: Deep knowledge of PKI and X.509 certificates, including TLS/SSL, Certificate Authorities (CA), issuance, renewal, and revocation.


• Certificate Management: Hands-on experience with enterprise certificate lifecycle management platforms (e.g., Key factor, Venafi, DigiCert, Sectigo, ADCS).


• Automation & Scripting: Strong hands-on automation and scripting experience using PowerShell, Python, and REST APIs.

Nice to Have

• Key factor Command or EJBCA experience.


• Key and secrets management tools: Azure Key Vault, Hashi Corp Vault.


• Protocols and Cloud Platforms: ACME protocol, Azure, AWS.


• Infrastructure & Web Servers: F5, NGINX, IIS.


• DevOps and Infrastructure as Code (IaC) experience.

About VGAI Solutions

VGAI Solutions is an AI-native and technology solutions firm that helps organizations build high-performing engineering and technology teams. MBE-certified and ISO 9001-registered, we operate across the USA, Mexico, UAE, Mauritius, and India, with our Global Delivery Center in Hyderabad. From specialized IT to engineering talent to end-to-end AI solutions, we deliver the human capital that powers our Fortune 1000 clients.

Equal Opportunity Statement

VGAI Solutions is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, disability, veteran status, or any other protected characteristic.