PKI Engineer

State Street; Quincy (MA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401K with company match

Insurance coverage: life, medical, eye

Paid-time off: vacation, sick leave, T

Employee Assistance Program

Incentive compensation: annual awards

Tax-advantaged savings plans

Job summary

State Street is seeking a hands-on PKI Engineer to support enterprise PKI, certificate lifecycle management, and machine identity services. You will help implement automation, integrations, and platform improvements under PKI leadership, focusing on reliability and risk reduction across the certificate lifecycle.

You will work with teams across ServiceNow, cloud platforms, and monitoring tools, developing automation scripts and remediation workflows while maintaining documentation and strong

Qualifications

• 3+ years of PKI, security engineering, infrastructure automation or related technology experience.
• Working knowledge of TLS, SSL, certificate authorities, certificate lifecycle management, and basic cryptographic concepts.
• Experience with scripting or automation using PowerShell, Python, APIs or similar tools.
• Familiarity with Windows, Linux, networking, and cloud environments.

Responsibilities

• Support engineering and maintenance of enterprise PKI and certificate lifecycle management platforms.
• Develop and maintain automation for certificate issuance, renewal, reporting, and remediation workflows.
• Assist with integrations across ServiceNow, cloud platforms, monitoring tools, and enterprise security systems.
• Collaborate with audit, risk, and technical teams to reduce operational friction and improve platform reliability.

Skills

PKI engineering

Automation scripting

TLS/SSL concepts

Windows/Linux

Tools

Keyfactor

DigiCert

Microsoft ADCS

Job description

Role Overview

This role supports engineering, automation, and continuous improvement for enterprise PKI, certificate lifecycle management, and machine identity services. The role will help implement automation, integrations, and platform improvements under the direction of senior PKI engineering leadership.

What You Will Do

As a PKI Engineer, you will support engineering and maintenance of enterprise PKI and certificate lifecycle management platforms, develop and maintain automation for certificate issuance, renewal, reporting, and remediation workflows, and assist with integrations across ServiceNow, cloud platforms, monitoring tools, and enterprise security systems.

Why It Might Be a Fit

We are looking for a hands-on engineer who can support PKI platforms, develop automation, assist with integrations, and help reduce operational friction across certificate lifecycle management processes. Strong ownership mindset, practical focus on risk reduction, and ability to communicate clearly with technical teams, leadership, audit, and risk stakeholders are required.

Requirements

• 3+ years of PKI, security engineering, infrastructure automation or related technology experience


• Working knowledge of TLS, SSL, certificate authorities, certificate lifecycle management, and basic cryptographic concepts


• Experience with scripting or automation using PowerShell, Python, APIs or similar tools


• Familiarity with Windows, Linux, networking, and cloud environments


• Experience with Keyfactor, DigiCert, Microsoft ADCS or similar platforms is preferred


• Strong troubleshooting, documentation, and collaboration skills

Benefits

• 401K with company match


• Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages


• Paid-time off including vacation, sick leave, short-term disability, and family care responsibilities


• Access to Employee Assistance Program


• Incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)


• Eligibility for certain tax-advantaged savings plans