PKI Engineer: Automation & Certificate Lifecycle

State Street; Devon (PA); On-site; USD 90,000 - 157,500; Full time

Benefits offered by this job

401K match

Medical, dental, vision

Paid time off

Job summary

State Street in the United States is seeking a PKI Engineer to support enterprise PKI, certificate lifecycle, and machine identity services. You will implement automation, integrations, and platform improvements under PKI leadership.

The role is hands-on, involves scripting in PowerShell or Python, Windows/Linux familiarity, and collaboration with security, IT ops, and audit teams. Salary range aligns with market, with comprehensive benefits.

Qualifications

• 3+ years of PKI, security engineering or automation experience.
• In-depth TLS/SSL concepts and certificate lifecycle knowledge.
• Scripting experience with PowerShell, Python, or APIs.
• Familiarity with Windows, Linux, networking and cloud environments.
• Preferred: Keyfactor, DigiCert or Microsoft ADCS.
• Strong troubleshooting, documentation and collaboration skills.

Responsibilities

• Support enterprise PKI and certificate lifecycle management platforms.
• Develop and maintain automation for issuance, renewal, reporting and remediation workflows.
• Assist with integrations across ServiceNow, cloud platforms and monitoring tools.
• Support certificate discovery, inventory enrichment and ownership mapping.
• Support machine identity management and certificate deployment patterns.
• Create and maintain technical documentation and runbooks.
• Participate in incident investigation and service improvement activities.
• Support audit, compliance and risk evidence requests related to PKI.

Job description

State Street in the United States is seeking a PKI Engineer to support enterprise PKI, certificate lifecycle, and machine identity services. You will implement automation, integrations, and platform improvements under PKI leadership.

The role is hands-on, involves scripting in PowerShell or Python, Windows/Linux familiarity, and collaboration with security, IT ops, and audit teams. Salary range aligns with market, with comprehensive benefits.