PKI Engineer: Cloud & Enterprise Certificate Management

Landis+Gyr AG; Alpharetta (GA); On-site; USD 111,000 - 148,000; Full time

Benefits offered by this job

Tuition reimbursement program

PTO — 3 weeks

11 paid holidays

Pet insurance

Supplemental medical coverage

Job summary

Landis+Gyr is seeking a Security PKI Engineer to operate and support symmetric and asymmetric encryption solutions and the Global PKI Program. You will enforce PKI policies, support a global PKI environment, and work with development and support teams to ensure PKI services are utilized appropriately.

You will also support cloud-based key and secret policies and collaborate with infrastructure, cloud, IAM, and security teams to deploy secure cryptographic solutions.

Qualifications

• Bachelor's degree in CS, Info Security, Engineering, or equivalent.
• 5+ years hands-on PKI, Certificate Management, Cryptography, Infrastructure Security, or related cybersecurity domain.
• Experience administering enterprise PKI environments and Certificate Lifecycle Management platforms.
• Experience with public certificate authorities, code-signing certificates, and certificate automation frameworks.
• Preferred CISSP, CISM, Microsoft Security Certifications, Keyfactor Certified Professional, or equivalent.

Responsibilities

• Design, implement, administer, and support enterprise PKI solutions (Microsoft AD CS, EJBCA, cloud PKI).
• Manage complete certificate lifecycle across internal, external, customer, manufacturing, and cloud environments.
• Support and maintain CLM platforms such as Keyfactor, Venafi, AppViewX, or equivalent.
• Implement and maintain certificate automation using ACME, EST, SCEP, REST APIs, PowerShell, Python, and other frameworks.
• Manage public certificate services (DV, OV, EV, code-signing, public trust).
• Perform certificate discovery and inventory across servers, apps, cloud, load balancers, and DevOps.
• Troubleshoot PKI, TLS/SSL, cryptographic, OCSP, CRL, and trust-store issues.
• Develop PKI architecture standards, policies, lifecycle processes, runbooks, and governance docs.
• Collaborate with infra, cloud, application, DevOps, IAM, and security teams to deploy cryptographic solutions.
• Support disaster recovery, PKI readiness, backup validation, key ceremonies, and business continuity.
• Participate in PKI modernization, platform upgrades, cloud PKI, and post-quantum readiness.
• Participate in on-call rotations for PKI and cryptographic incidents.

Skills

PKI knowledge

Cryptography

Automation (PowerShell/Python)

TLS/SSL troubleshooting

Certificate lifecycle management

Education

Bachelor's degree in CS/InfoSec/Engineering

Tools

Microsoft AD CS

EJBCA

Keyfactor

Venafi

AppViewX

Azure

AWS

GCP

Job description

Landis+Gyr is seeking a Security PKI Engineer to operate and support symmetric and asymmetric encryption solutions and the Global PKI Program. You will enforce PKI policies, support a global PKI environment, and work with development and support teams to ensure PKI services are utilized appropriately.

You will also support cloud-based key and secret policies and collaborate with infrastructure, cloud, IAM, and security teams to deploy secure cryptographic solutions.