PKI Engineer: Automation & Certificate Lifecycle

State Street; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Medical insurance

Dental insurance

Vision insurance

Paid time off

Long-term disability

Employee assistance program

Job summary

State Street in Massachusetts is seeking an engineer to support enterprise PKI, certificate lifecycle management and machine identity services. You will help automate, integrate and improve platforms under PKI leadership, focusing on reducing operational friction and enabling secure identity workflows.

Ideal candidates have hands-on PKI and security engineering experience, strong scripting skills in PowerShell or Python, and familiarity with Windows, Linux, and cloud environments.

Qualifications

• 5+ years PKI, security engineering or related experience.
• Working knowledge of TLS, SSL, certificate authorities and lifecycle concepts.
• Experience scripting with PowerShell, Python or APIs.
• Familiarity with Windows, Linux, networking and cloud environments.
• Experience with Keyfactor, DigiCert or Microsoft ADCS preferred.
• Strong troubleshooting, documentation and collaboration skills.

Responsibilities

• Support enterprise PKI and certificate lifecycle platforms.
• Develop automation for issuance, renewal, reporting and remediation workflows.
• Assist with integrations across ServiceNow, cloud platforms and security systems.
• Support discovery, inventory enrichment and ownership mapping.
• Assist machine identity deployment across infra and apps.
• Create and maintain runbooks and technical docs.
• Assist with testing, implementation and transition of changes.
• Participate in incident investigations and service improvements.
• Support audit and risk evidence requests related to PKI.

Skills

PKI expertise

Security engineering

Automation/integration

Collaboration skills

Troubleshooting

Tools

PowerShell

Python

APIs

Windows

Linux

Cloud environments

Job description

State Street in Massachusetts is seeking an engineer to support enterprise PKI, certificate lifecycle management and machine identity services. You will help automate, integrate and improve platforms under PKI leadership, focusing on reducing operational friction and enabling secure identity workflows.

Ideal candidates have hands-on PKI and security engineering experience, strong scripting skills in PowerShell or Python, and familiarity with Windows, Linux, and cloud environments.