PKI Engineer

Jobtailor; Massachusetts; On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor is seeking a PKI and security automation engineer to support enterprise certificate lifecycle platforms and machine identity management across our infrastructure and applications. You will develop automation for issuance, renewal, reporting and remediation; integrate with ServiceNow, cloud platforms and security tools; and contribute to incident response, audits and documentation.

The ideal candidate has 3+ years of PKI or security engineering experience, strong scripting skills

Qualifications

• 3+ years of PKI, security engineering, or related experience.
• Working knowledge of TLS/SSL and certificate lifecycle management.
• Scripting or automation with PowerShell, Python, or APIs.
• Familiarity with Windows, Linux, networking, and cloud environments.
• Experience with Keyfactor, DigiCert, or Microsoft ADCS preferred.
• Strong troubleshooting and documentation skills.

Responsibilities

• Support engineering and maintenance of enterprise PKI and certificate lifecycle platforms
• Develop automation for certificate issuance, renewal, reporting and remediation workflows
• Assist integrations across ServiceNow, cloud platforms, monitoring tools and enterprise security systems
• Support certificate discovery, inventory enrichment, ownership mapping and remediation activities
• Support machine identity management and certificate deployment patterns across infrastructure and application teams
• Create and maintain technical documentation, support procedures and automation runbooks
• Assist with testing, implementation and transition of engineering changes into operations
• Participate in incident investigation, problem management and service improvement activities
• Support audit, compliance and risk evidence requests related to PKI and certificate management

Skills

PKI Management

Certificate Lifecycle

Automation Scripting

TLS/SSL Knowledge

Incident Investigation

Tools

ServiceNow

Keyfactor

DigiCert

Microsoft ADCS

Cloud Platforms

Job description

• Support engineering and maintenance of enterprise PKI and certificate lifecycle management platforms


• Develop and maintain automation for certificate issuance, renewal, reporting and remediation workflows


• Assist with integrations across ServiceNow, cloud platforms, monitoring tools and enterprise security systems


• Support certificate discovery, inventory enrichment, ownership mapping and remediation activities


• Support machine identity management and certificate deployment patterns across infrastructure and application teams


• Create and maintain technical documentation, support procedures and automation runbooks


• Assist with testing, implementation and transition of engineering changes into operations


• Participate in incident investigation, problem management and service improvement activities


• Support audit, compliance and risk evidence requests related to PKI and certificate management

Requirements

• 3+ years of PKI, security engineering, infrastructure automation or related technology experience


• Working knowledge of TLS, SSL, certificate authorities, certificate lifecycle management and basic cryptographic concepts


• Experience with scripting or automation using PowerShell, Python, APIs or similar tools


• Familiarity with Windows, Linux, networking and cloud environments


• Experience with Keyfactor, DigiCert, Microsoft ADCS or similar platforms is preferred


• Strong troubleshooting, documentation and collaboration skills

Core Competencies

Demonstrates expertise in PKI and certificate lifecycle management, with strong capabilities in automation, integration, and compliance support. Proficient in troubleshooting and documentation within enterprise security environments.

Highest-signal resume keywords

• PKI Management


• Certificate Lifecycle Management


• Automation Scripting


• TLS/SSL Knowledge


• Incident Investigation

ATS Optimization Keywords

Hard Skills

• PKI


• Security Engineering


• Infrastructure Automation


• Certificate Issuance


• Certificate Renewal


• PowerShell


• Python


• APIs


• Troubleshooting


• Documentation

Soft Skills

• Collaboration


• Problem Management

Industry Keywords

• Certificate Authorities


• Cryptographic Concepts


• Machine Identity Management


• Audit Compliance


• Risk Evidence

Tools & Technologies

• ServiceNow


• Keyfactor


• DigiCert


• Microsoft ADCS


• Cloud Platforms