PKI Engineer

iSpace, Inc.; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

iSpace, Inc. is seeking a senior Systems Engineer IV to own PKI, certificate lifecycle, HSM, and secrets management in a 100% remote environment across the United States.

You will drive automation and architecture improvements, partner with Security and Infra teams, and elevate cryptographic services enterprise-wide. Ideal candidates bring 7–10 years in PKI and cryptographic platforms, experience with HSMs, IaC, and PowerShell, and a proven track record delivering secure, scalable infrastructure

Qualifications

• 7-10 years of experience managing PKI, certificate management and cryptographic platforms in enterprise environments.
• 5+ years in a Directory Services, Infrastructure/DevOps or Platform Engineering role.
• Strong expertise in certificate lifecycle management, PKI architecture and cryptographic security practices.
• Hands-on experience with Hardware Security Modules (HSMs).
• Advanced PowerShell scripting and automation experience.
• Experience building integrations with security and identity platforms via APIs and automation frameworks.

Responsibilities

• Lead optimization, automation and enhancement of enterprise cryptographic and certificate management platforms.
• Design and implement security controls, risk mitigation, system hardening and operational improvements.
• Serve as escalation point for complex Directory Services and cryptography issues.
• Develop and automate workflows for secrets management platforms.
• Help define engineering roadmaps and priorities for the Directory Services team.
• Manage project timelines and deliverables from planning through implementation.
• Support pilots, POCs and new technology evaluations.
• Collaborate across infra, security, DevOps and application teams to deliver scalable solutions.
• Participate in architecture reviews and governance forums.
• Contribute to continuous improvement of identity, security and infrastructure platforms.

Skills

PKI management

Certificate management

Cryptographic security

HSMs

PowerShell

Automation

Secrets management

IaC/CI/CD

Cloud (AWS)

APIs & automation

Tools

Keyfactor

CyberArk

HashiCorp Vault

AWS

Job description

Systems Engineer IV – PKI, Secrets Management & Automation

Location: 100% Remote

Duration: November 30, 2026 – May 31, 2027 (with potential extension)

We are seeking a hands-on senior infrastructure engineer with deep expertise in PKI, certificate lifecycle management, HSMs, cloud-based secrets management, and infrastructure automation. This Engineer will join our client's Infrastructure and Operations team, specializing in PKI, cryptographic services, certificate management, and secrets management automation. This role will be responsible for enhancing and optimizing enterprise cryptographic platforms, driving automation initiatives, and supporting the future evolution of security and identity infrastructure.

The ideal candidate thrives on solving complex security and automation challenges while helping shape the future of enterprise identity and cryptographic services. Combining strong technical expertise with strategic thinking, this individual will drive innovation, operational excellence, and security best practices across a large-scale enterprise environment.

Key Responsibilities:

• Lead the optimization, automation, and enhancement of enterprise cryptographic and certificate management platforms.
• Design and implement security controls, risk mitigation strategies, system hardening measures, and operational improvements.
• Serve as the highest-level escalation point for complex Directory Services and cryptography-related issues.
• Develop and automate workflows that improve efficiency, reduce operational overhead, and strengthen security posture.
• Help define engineering roadmaps, priorities, and strategic initiatives for the Directory Services team.
• Manage project timelines, deliverables, and technology initiatives from planning through implementation.
• Support pilot programs, proofs of concept (POCs), and new technology evaluations.
• Collaborate across infrastructure, security, DevOps, and application teams to deliver scalable enterprise solutions.
• Participate in architecture reviews, engineering committees, and technology governance forums.
• Contribute to continuous improvement efforts across identity, security, and infrastructure platforms.
• Required Skills and Expertise:7-10 years of experience managing PKI, certificate management, and cryptographic platforms in enterprise environments.
• 5+ years of experience in a Directory Services, Infrastructure Engineering, DevOps, or Platform Engineering role.
• Strong expertise in certificate lifecycle management, PKI architecture, and cryptographic security practices.
• Hands-on experience deploying, managing, and troubleshooting Hardware Security Modules (HSMs).
• Advanced PowerShell scripting and automation experience.
• Experience developing and automating workflows for secrets management platforms.
• Hands-on experience with cloud infrastructure platforms, including:
• Amazon Web Services (AWS)
• Experience building integrations using APIs and automation frameworks.
• Proven experience with Infrastructure as Code (IaC) and CI/CD pipeline development.
• Strong understanding of Incident, Request, Problem, and Change Management processes.
• Excellent communication skills with the ability to partner effectively with engineering teams, business stakeholders, and project leadership.

Preferred Skills and Expertise:

Experience with Keyfactor certificate management platforms.

• Experience with CyberArk, HashiCorp Vault, or other enterprise secrets management solutions.
• Experience integrating security and identity platforms across hybrid cloud environments.
• Knowledge of DevOps and platform engineering best practices.
• Experience leading technical initiatives and mentoring engineering teams.