PKI Engineer

Danta Technologies; Town of Texas (WI); On-site; USD 62,000 - 69,000; Full time

Job summary

Danta Technologies seeks a PKI Engineer for an onsite, long-term role in Dallas, TX. You will manage Certificate Authority related tooling, AD integrations, and platform authentication across Windows and Unix systems.

Requirements include Venafi experience, PKI expertise, scripting skills (Python, PowerShell, Bash, KSH), and strong collaboration with security teams. This position is W2 or C2C with pay of $45–$50/hr.

Qualifications

• Experience with certificate life cycle management tools (Venafi).
• Hands-on experience with PKI and certificate management.
• Knowledge of TLS, PKI, encryption technologies.
• Experience with Windows and Unix authentication and AD.
• Experience with scripting (Python, PowerShell, Bash, KSH).
• Familiar with network and system security concepts and vulnerability remediation.
• Strong communication and stakeholder collaboration skills.

Responsibilities

• Develop and implement CA management processes and controls.
• Integrate tools to automate PKI, AD and platform authentication.
• Provide manual and automated reports from Venafi and related systems.
• Collaborate with security and infrastructure teams for automation.
• Design and optimize authentication workflows and IAM integrations.

Skills

Agile methodologies (Kanban, Scrum)

RBAC management

Cross-platform (Windows/Unix)

Tools

Venafi

Certificate Authority tools

Python

PowerShell

Bash

KSH

SSH

TLS/PKI

AWS

Puppet/Ansible

LDAP

Job description

Job Description

Employment Eligibility Statement
Due to specific project and client requirements, this position is open to U.S. Citizens and U.S. Lawful Permanent Residents (Green Card holders) . Sponsorship is not available at this time.
Danta Technologies evaluates all candidates in compliance with the Immigration and Nationality Act (INA) and EEOC guidelines . All hiring decisions are made without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.
Job Title: PKI Engineer

Location: Dallas TX 75202 – Onsite position

Long term position
Pay rate - $45/hr on W2/Danta Technologies payroll (OR) $50/hr on C2C

Note :- In-person Interview required
The candidate right for this role, Public Key Infrastructure Engineer would be responsible for ensuring the processes and controls are developed and implemented around the Certificate Authority (CA) Management core, Active Directory and the platform authentication (Windows and Unix). This role would work to develop and integrate the various tools to better automate and manage the Public Key Infrastructure and ensure auditability for management of these systems. This role is expected to work cross capability with Security and infrastructure to ensure full integration and automation.
Required Skills and Experience:

• Working within an agile development methodology (Kanban, Scrum, etc)
• Hand-on-experience with Certificate Life Cycle Management Tool – Venafi.
• In-depth knowledge of managing keys and RBAC via Venafi System.
• Well versed with integration and enrollment via defined workflows.
• Responsible for providing manual and automated reports through venafi system.
• Experience with continuous delivery and deployment.
• Experience assessing of data protection approaches, requirements, and activities.
• Certification Authorities, Two-Factor Authentication, MFA, LDAP Directories, OCSP, ICAM and the standards relating to them.
• Understanding of cryptography, key management, masking, tokenization, or other data protection technologies
• Experience utilizing and deploying encryption technologies such as TLS, PGP, PKI, and HSM
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing methods principles and concepts
• An understanding of SSH, especially the configuration and use of SSH keys for authentication.
• Experience with high-level script languages such as Python, along with shell scripting in KSH, Bash, and PowerShell.
• Knowledge and experience of network and system security solutions, concepts, and technologies.
• Experience with distributed platforms such as Linux. Windows server is a plus.
• Have clear and concise communication and be comfortable working with all levels in the organization
• Effective at both collaboration and negotiation with internal stakeholders.
• Capable of managing and prioritize multiple projects with competing resource requirements and timelines
• 10 yrs+ working in an IT Infrastructure related role along with associated design experience.

Preferred:

• Demonstrated experience with server configuration management (infrastructure automation) tools (i.e. - Ansible, Puppet)
• Experience supporting enterprise server hardware (Dell or Client)
• Experience with Identity Management solutions such as IBM's TIM/TAM
• Experience with IOT devices and management a plus
• Design and implement solutions for integration within client environments for various Red Hat products such as IdM (Identity Management), Satellite, RHV (Red Hat Virtualization), RHDS (Red Hat Directory Server), Ceph, etc.
• AWS Cloud experience including core services EC2, S3, ALB/NLB, Lambda, RDS
• Experience of designing, optimizing and troubleshooting public cloud platforms associated with large, complex application stacks
• 3 yrs+ working in a PKI environment and bonus points for working with AWS public cloud environments
• AWS hands on experience of designing and managing AWS cloud solutions
• Previous experience working as a either a Technical Architect, Solutions Architect, Technical Design Authority or Solutions
• Designer would be preferred
• The candidate right for this role, Public Key Infrastructure Engineer would be responsible for ensuring the processes and controls are developed and implemented around the Certificate Authority (CA) Management core, Active Directory and the platform authentication (Windows and Unix). This role would work to develop and integrate the various tools to better automate and manage the Public Key