PKI Engineer (13658)

SFE; Irving (TX); Presencial; USD 90 000 - 125 000; Tempo integral

Resumo da oferta

SFE is seeking a PKI Engineer to design, administer, and secure the enterprise PKI environment in Irving, TX. The role focuses on certificate lifecycle, CA/RA operations, and integration with automated management tools.

The ideal candidate has 3–5 years of PKI and information security experience, strong scripting ability, and a solid understanding of cryptographic principles. This is a full-time, onsite position with occasional after-hours support.

Qualificações

• Experience managing AD CS or equivalent PKI platforms.
• Strong PKI lifecycle and SSL/TLS knowledge.
• Experience with HSMs and cryptographic key management.
• Automation scripting with PowerShell or similar.
• Excellent troubleshooting and documentation skills.

Responsabilidades

• Administer enterprise PKI platforms including CAs, RAs, HSMs, OCSP, and enrollment services.
• Lifecycle management of certificates for users, devices, servers, apps, and cloud.
• Implement PKI security controls, policies, and cryptographic standards.
• Design automated certificate management using AD CS, Venafi, Keyfactor, DigiCert, ACME.
• Manage cryptographic key generation, storage, rotation, escrow, destruction.
• Troubleshoot certificate issues for apps, websites, VPNs, authentication.
• Develop PKI diagrams, procedures, and governance documentation.
• Participate in security assessments and incident response.

Conhecimentos

PKI engineering

Information security

Automation scripting

Formação académica

Bachelor's degree in IT/CS/Cybersecurity

Ferramentas

Active Directory Certificate Services (AD CS)

HSMs

Venafi

Keyfactor

DigiCert

ACME

PowerShell

Descrição da oferta de emprego

Role: PKI Engineer (13658)

Location: Irving, TX 75063 (5 Days Onsite)

Contract Length: 12+ Months with possibility of extension

Position Summary (Summary of the Role)

• We are seeking a skilled and motivated PKI Engineer to join our Infrastructure and Security team.
• This role is responsible for designing, administering, securing, and maintaining the organization's Public Key Infrastructure (PKI) environment.
• The engineer will manage the lifecycle of digital certificates, certificate authorities, cryptographic services, and related security controls to ensure the confidentiality, integrity, and availability of enterprise systems and applications.

Key Responsibilities

• PKI Infrastructure Administration: Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), HSMs, OCSP responders, and certificate enrollment services.
• Certificate Lifecycle Management: Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances.
• PKI Security & Compliance: Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards.
• Certificate Automation & Integration: Design and support automated certificate management solutions using Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies.
• Cryptographic Key Management: Manage cryptographic key generation, storage, rotation, escrow, and destruction processes.
• Troubleshooting & Support: Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems.
• PKI Standards & Documentation: Develop and maintain PKI architecture diagrams, procedures, technical documentation, and governance standards.
• Security Operations & Continuous Improvement: Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts.

Expectations

• Full-time, on-site position based in Irving, TX.
• Occasional after-hours support may be required.
• Participation in certificate renewals, maintenance windows, and emergency security response activities when necessary.

Years of Experience

• 3-5 years of PKI engineering, information security, or infrastructure security experience.

Required Qualifications (Non-Negotiable)

• Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles.
• Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
• Knowledge of HSMs and cryptographic key management.
• Strong troubleshooting, analytical, and documentation skills.
• Experience with PowerShell or other automation/scripting technologies.

Nice-to-Have Qualifications (Desired but Not Required)

• Public Key Infrastructure Administration
• Certificate Lifecycle Management
• Cryptography & Key Management
• SSL/TLS Security
• Certificate Automation & Governance
• Security Compliance & Risk Management
• Technical Documentation
• Incident Analysis & Troubleshooting

Education & Certification Requirements

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience).
• Security+, CISSP, GSEC, or equivalent security certifications.
• Microsoft security or identity certifications preferred.
• Experience with Azure, AWS, or GCP certificate management services.
• Knowledge of Zero Trust principles and modern authentication technologies.

Preferred Industry Experience

• Convenience Retail
• Fuel Operations
• Supply Chain
• Enterprise Infrastructure Operations

We are an equal opportunity employer with a diverse workforce.