PKI Engineer, Consultant

Releady; Denver (CO); Hybrid; USD 214,906,000 - 229,233,000; Full time

Job summary

Releady, partnering with a leading healthcare technology company, seeks a Senior PKI Engineer to design, operate, and improve certificate services and integration with cloud platforms and development workflows. The role emphasizes automation, security controls, and collaboration across security, platform, and application teams.

You will own CA operations, lifecycle management, and integration of PKI with AWS/Azure and on-prem environments, while expanding automation to prevent outages and

Qualifications

• 7+ years in PKI, certificate services, or security infrastructure engineering.
• Expert knowledge of CA architecture, certificate profiles, and X.509 lifecycle.
• Hands-on experience operating production PKI services and TLS issue troubleshooting.
• Experience with AWS or Azure and integrating certificate services with cloud workloads.
• Strong automation skills in Python/PowerShell/Go; IaC with Terraform/Bicep/CloudFormation.
• Familiarity with enrollment and automation protocols (ACME/SCEP/EST).
• Ability to document designs clearly and collaborate with security and engineering teams.

Responsibilities

• Design and operate certificate authorities, registration authorities, HSM integrations, and certificate management.
• Own certificate lifecycle processes including enrollment, issuance, renewal, revocation, monitoring and incident response.
• Build automation to reduce manual certificate work and prevent outages from expired or misconfigured certificates.
• Integrate PKI with applications, devices, and services on premises and in AWS or Azure; define IaC for PKI services.
• Collaborate with security and platform teams to ensure secure, usable certificate usage; explore AI-enabled workflow improvements.

Skills

PKI expertise

Certificate services

Automation

Cloud platforms (AWS/Azure)

Scripting (Python/PowerShell/Go)

Infrastructure as code (Terraform/Bice

Automation protocols (ACME/SCEP/EST)

Cross-functional collaboration

Tools

AWS

Azure

Job description

OVERVIEW

Releady is partnering with a leading healthcare technology company to hire a Senior PKI Engineer. The organization builds the AI-powered technology platform that nonprofit and community health plans use to unify member, claims, clinical, and provider data, automate operations, and deliver better member experiences.

In this role, you will design, operate, and improve the company’s certificate services. You will bring deep public key infrastructure (PKI) expertise and use automation to make certificate issuance, renewal, and revocation reliable at scale. You will also integrate PKI with cloud services and development workflows, partnering closely with security, platform, and application teams on an identity platform engineering team.

NOTE: *Must be eligible to work on W2 without sponsorship. Not eligible for C2C.

• Pay Rate: $75–$80/hr
• Duration: 12 months contract
• Location: Hybrid or Remote, however must reside in the following states: WA, OH, CA, AZ, CO, CT, FL, GA, MD, MN, NV, OR, AL, IL, VA, WI, TX, NY

RESPONSIBILITIES

PKI Architecture & Operations

• Design and operate certificate authorities, registration authorities, HSM integrations, and certificate management services.
• Establish sound practices for key protection, access control, auditing, and recovery.

Certificate Lifecycle Management

• Own certificate lifecycle processes, including enrollment, issuance, renewal, revocation, monitoring, and incident response.
• Build automation that reduces manual certificate work and prevents outages caused by expired or misconfigured certificates.

Cloud Integration & Infrastructure as Code

• Integrate PKI with applications, devices, and services running on premises and in AWS or Azure.
• Define and maintain infrastructure as code for PKI services and supporting cloud infrastructure.

Collaboration & Innovation

• Partner with security, platform, and application teams to make certificate use secure and straightforward.
• Evaluate practical uses of AI to improve operational workflows while applying appropriate review and security controls.

QUALIFICATIONS

• 7+ years of experience in PKI, certificate services, or security infrastructure engineering.
• Expert knowledge of CA architecture, certificate profiles and policies, key management, revocation, and the X.509 certificate lifecycle.
• Hands‑on experience operating production PKI services and troubleshooting certificate, trust chain, and TLS issues.
• Experience with AWS or Azure and integrating certificate services with cloud workloads.
• Strong automation skills in Python, PowerShell, or Go, plus infrastructure as code experience with Terraform, Bicep, or CloudFormation.
• Familiarity with certificate enrollment and automation protocols such as ACME, SCEP, or EST.
• Ability to document designs clearly and work across security and engineering teams.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non‑merit factor. We are committed to creating a diverse and inclusive environment for all employees.