PKI Engineer

Veriipro; Jersey City (NJ); On-site; USD 90,000 - 120,000; Full time

Job summary

Veriipro in Jersey City is seeking a skilled professional to design, implement, and maintain PKI infrastructure while managing the entire certificate lifecycle. The role includes developing automation solutions using Ansible and Terraform, troubleshooting complex PKI and certificate-related issues, and ensuring high availability.

The ideal candidate will have experience with PKI platforms, strong analytical skills, and a Bachelor’s degree in Computer Science or a related field. Relevant certifications are a plus.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Strong hands-on experience with PKI platforms and Certificate Lifecycle Management systems.
• Experience with infrastructure automation tools such as Ansible, Terraform, and PowerShell.

Responsibilities

• Design, implement, and maintain PKI infrastructure including Certificate Authorities.
• Manage end-to-end certificate lifecycle processes.
• Develop automation solutions to streamline PKI operations.

Skills

PKI platforms

Ansible

Terraform

PowerShell

TLS/SSL protocols

Problem-solving

Analytical skills

Education

Bachelor’s degree in Computer Science or related field

Tools

Certificate Lifecycle Management systems

Hardware Security Modules

Job description

Primary Responsibilities

• Design, implement, and maintain PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and CRL/OCSP services
• Manage end-to-end certificate lifecycle processes, including enrollment, issuance, renewal, and revocation
• Develop automation solutions using Ansible, Terraform, and PowerShell to streamline PKI operations
• Troubleshoot complex PKI, TLS/SSL, and certificate-related issues across enterprise systems
• Monitor PKI system health, ensure high availability, and support disaster recovery planning and execution
• Implement and enforce security controls, policies, and regulatory compliance requirements
• Collaborate with security, infrastructure, and application teams to support secure system integration
• Contribute to PKI strategy, architecture improvements, and operational best practices
• Mentor junior engineers and provide technical guidance within the team

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field
• Strong hands‑on experience with PKI platforms, including Certificate Lifecycle Management (CLM) systems, Certificate Authorities, and Hardware Security Modules (HSMs)
• Experience with infrastructure automation tools such as Ansible, Terraform, and PowerShell
• Deep understanding of TLS/SSL protocols, X.509 certificates, and CRL/OCSP mechanisms
• Proven experience troubleshooting PKI environments and resolving complex certificate-related issues

Preferred Qualifications

• Experience working in large-scale, enterprise PKI environments
• Knowledge of PKI governance, risk management, and compliance frameworksFamiliarity with mutual TLS (mTLS) and emerging cryptographic trends such as post-quantum cryptography (PQC)
• Relevant certifications such as Security+ or CISSP

Core Competencies

• Strong analytical and problem‑solving abilities
• High attention to detail, especially in certificate and identity lifecycle management
• Excellent communication and cross‑functional collaboration skills
• Ability to operate effectively in a fast‑paced, regulated environment
• Continuous learning mindset with interest in evolving cryptographic standards