PKI Engineer

Ptechpartners; Irving (TX); On-site; USD 76,000 - 96,000; Full time

Job summary

Peterson Technology Partners is seeking a PKI Engineer to join the Infrastructure and Security team in a full‑time, on‑site role in Irving, TX. You will design, secure, and maintain the organization’s PKI, manage CAs, RAs, ESOs, and certificate enrollment services, and drive automation with scripting and vendor tools.

The ideal candidate has 3–5 years of PKI/InfoSec experience, strong AD CS expertise, cryptography knowledge, and hands‑on with HSMs, OCSP, and PKI governance.

Qualifications

• 3-5 years PKI engineering or security experience.
• Experience managing AD CS or equivalent PKI platforms.
• Strong knowledge of PKI concepts, SSL/TLS, X.509, and cryptographic principles.
• Experience with certificate enrollment, renewal, revocation, and validation.

Responsibilities

• Administer enterprise PKI platforms including CAs, RAs, and OCSP responders.
• Manage certificate lifecycle: issue, renew, revoke, replace certificates for users, devices, servers, apps, cloud services.
• Implement PKI security controls, policies, and cryptographic standards.
• Support automation of certificate management using scripting and tooling.
• Handle troubleshooting of certificate-related issues across applications and networks.

Skills

PKI engineering

AD CS

PowerShell

HSMs

SSL/TLS

Education

Bachelor's degree IT/CS

Certifications (Security+ / CISSP / GSEC)

Tools

Venafi

Keyfactor

DigiCert

ACME

Job description

Our client is seeking a skilled and motivated PKI Engineer to join their Infrastructure and Security team. This role is responsible for designing, administering, securing, and maintaining the organization's Public Key Infrastructure (PKI) environment. The engineer will manage the lifecycle of digital certificates, certificate authorities, cryptographic services, and related security controls to ensure the confidentiality, integrity, and availability of enterprise systems and applications.

Key Responsibilities:

• PKI Infrastructure Administration: Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), HSMs, OCSP responders, and certificate enrollment services.
• Certificate Lifecycle Management: Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances.
• PKI Security & Compliance: Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards.
• Certificate Automation & Integration: Design and support automated certificate management solutions using Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies.
• Cryptographic Key Management: Manage cryptographic key generation, storage, rotation, escrow, and destruction processes.
• Troubleshooting & Support: Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems.
• PKI Standards & Documentation: Develop and maintain PKI architecture diagrams, procedures, technical documentation, and governance standards.
• Security Operations & Continuous Improvement: Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts.
• Full-time, on-site position based in Irving, TX.
• Occasional after-hours support may be required.
• Participation in certificate renewals, maintenance windows, and emergency security response activities when necessary.

Years of Experience:

• 3-5 years of PKI engineering, information security, or infrastructure security experience.
• Required Qualifications (Non-Negotiable):
• Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles.
• Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
• Knowledge of HSMs and cryptographic key management.
• Strong troubleshooting, analytical, and documentation skills.
• Experience with PowerShell or other automation/scripting technologies.

Nice-to-Have Qualifications (Desired but Not Required):

• Public Key Infrastructure Administration
• Certificate Lifecycle Management
• Cryptography & Key Management
• SSL/TLS Security
• Certificate Automation & Governance
• Security Compliance & Risk Management
• Technical Documentation
• Incident Analysis & Troubleshooting

Education & Certification Requirements:

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience).
• Security+, CISSP, GSEC, or equivalent security certifications.
• Microsoft security or identity certifications preferred.
• Experience with Azure, AWS, or GCP certificate management services.
• Knowledge of Zero Trust principles and modern authentication technologies.

Preferred Industry Experience:

• Convenience Retail
• Fuel Operations
• Supply Chain
• Enterprise Infrastructure Operations

Salary/Rate: $55-$70/HR (depends on experience level). This is a contract position with candidates expected to work 40 hours/ week.

About The Company

Peterson Technology Partners (PTP) is an Equal Opportunity Employer committed to creating a transparent, inclusive, and human-centered hiring experience.

For more than 28 years, PTP has operated as one of the top IT staffing and recruiting firms in the USA-built on trust, long-term partnerships, and technical excellence.

Based in the Chicago suburb of Park Ridge, IL, our team of more than 500 employees and consultants is dedicated to:

Helping every client make the best hiring decisions possible

Matching professionals with the right IT jobs and career opportunities

As part of that commitment, we believe in providing clear information about how our hiring technologies work and how your data is used. The following section outlines our AI-assisted interview process and your rights as a candidate.

AI-Assisted Interview Experience (Pete & Gabi - Rebecca)

To provide a consistent, fair, and flexible experience for all candidates, we use AI-assisted tools to support parts of the interview process. This includes our proprietary AI platform Pete & Gabi, which includes AI recruiter Rebecca.

These AI hiring tools help us:

• Conduct recorded video interviews
• Transcribe interviews
• Summarize candidate responses
• Generate job-related insights
• Streamline communication and scheduling

Please note that:

The AI does NOT make hiring decisions; all decisions are made by our human recruiters, hiring managers, or client partners.

The AI does not evaluate facial expressions, emotions, or physical traits; it is used only to support fairness, consistency, and efficiency.

If you prefer a non-AI interview format, we will gladly provide an alternative.

Technical or Case Interviews (Role-Dependent):

When applying for certain tech jobs, you may participate in:

• A technical interview
• A case study
• A client-specific assessment

We will always explain what to expect in advance so you can prepare with confidence.

Human Review & Selection:

Every candidate's profile—including interviews, conversations, and assessments—is reviewed by experienced recruiters and hiring leaders.

AI insights may assist with organization and evaluation, but final decisions are always human-driven.

Your Rights as a Candidate:

At PTP, every candidate has the right to:

Request a non-AI interview path

Ask how your data is being used

Request access to transcripts or interview recordings

Request deletion of your AI-recorded interview

Receive clear, timely communication

Our goal is to ensure you feel respected, informed, and supported throughout your experience.

Our Commitment:

For more than 28 years, PTP has focused on putting people first-candidates, consultants, employees, and clients.

We're committed to a hiring process that is:

• Transparent
• Compliant
• Equitable
• Powered by innovative technology that enhances- not replaces- human judgment

Welcome to the future of hiring at Peterson Technology Partners.

We're excited to learn more about you.

Peterson Technology Partners is an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to race, color, religion, national origin, gender identity, sexual orientation, disability, veteran status, or any other protected characteristic.