PKI Engineer

INSPYR Solutions; Fort Worth (TX); On-site; USD 76,000 - 83,000; Full time

Benefits offered by this job

Comprehensive medical benefits

401(k) retirement plan

Job summary

INSPYR Solutions is seeking a PKI Engineer in Fort Worth, TX, with 3–5 years of hands-on PKI experience to design and support scalable certificate management.

Qualifications

• 3–5 years of PKI or security engineering experience.
• Strong hands-on PKI and X.509 certificate knowledge.
• Solid TLS/SSL, CA, certificate issuance, renewal, and revocation understanding.
• Experience with enterprise certificate management platforms (Keyfactor, Venafi, DigiCert, Sectigo, ADCS).
• Automation and scripting using PowerShell, Python, and APIs.

Responsibilities

• Design, implement, and support enterprise PKI and encryption solutions.
• Manage full lifecycle of X.509 certificates (issuance, renewal, revocation, troubleshooting).
• Develop scripts, APIs, and automation to streamline certificate management.
• Troubleshoot PKI/TLS issues and perform root cause analysis.
• Build scalable, reusable security solutions with engineering best practices.
• Partner with security and engineering teams to embed controls early in systems lifecycles.
• Identify technical debt and improve reliability, scalability, and efficiency.
• Document solutions, processes, and standards.
• Evaluate emerging technologies and contribute to prototypes and architecture improvements.

Skills

PKI

X.509 certificates

TLS/SSL

Automation

Scripting

Tools

Keyfactor

Venafi

DigiCert

Sectigo

Microsoft ADCS

PowerShell

Python

Job description

Title: PKI Engineer

Location: Fort Worth TX (3x a week onsite)

Duration: 3 months

Compensation: W2: $55/hr./C2C: $60/hr

Work Requirements: US Citizen, Green Card Holders, or Authorized to Work in the U.S.

Title: PKI Engineer

We are looking for a PKI Engineer with strong hands-on experience in enterprise PKI environments, certificate lifecycle management, and security automation. This role will focus on designing, supporting, and improving scalable PKI and encryption solutions while partnering with security and engineering teams to ensure secure, reliable, and efficient certificate management practices.

Key Responsibilities Include:

• Design, implement, and support enterprise PKI and encryption solutions.
• Manage the full lifecycle of X.509 certificates, including issuance, renewal, revocation, and troubleshooting.
• Develop and maintain scripts, APIs, and automation to streamline certificate management processes.
• Troubleshoot complex PKI, TLS/SSL, and certificate-related issues and perform root cause analysis.
• Build scalable and reusable technical solutions aligned with security and engineering best practices.
• Partner with security and engineering teams to integrate security controls early in the system lifecycle.
• Identify and reduce technical debt while improving reliability, scalability, and operational efficiency.
• Document technical solutions, processes, scripts, and standards.
• Evaluate emerging technologies and contribute to prototypes and architectural improvements.
• Provide technical guidance and support to other engineers when needed.

Required Qualifications:

• 3–5 years of related experience in PKI, security engineering, infrastructure security, or a closely related area.
• Strong hands-on experience with PKI and X.509 certificates.
• Solid understanding of TLS/SSL, Certificate Authorities (CA), certificate issuance, renewal, and revocation.
• Experience managing certificates in an enterprise environment using platforms such as Keyfactor, Venafi, DigiCert, Sectigo, Microsoft ADCS, or similar technologies.
• Experience with automation and scripting using PowerShell, Python, APIs, or similar tools.
• Strong troubleshooting and root cause analysis skills.
• Ability to work with cross-functional security, infrastructure, and engineering teams.

Preferred Qualifications:

• Experience with Keyfactor Command.
• Experience with EJBCA.
• Familiarity with Azure Key Vault or HashiCorp Vault.
• Experience with ACME-based certificate automation.
• Cloud experience with Azure and/or AWS.
• Experience supporting certificates on technologies such as F5, NGINX, and IIS.
• Familiarity with DevOps practices and Infrastructure as Code (IaC).

Our benefits package includes:

• Comprehensive medical benefits
• Competitive pay
• 401(k) retirement plan
• …and much more

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients’ business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities. Applicants requiring reasonable accommodation during the application or interview process should contact [e-mail] for assistance. Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.

26-159455