PKI Engineer, Consultant

Jobgether; Oregon; Hybrid; USD 103,000 - 110,000; Full time

Benefits offered by this job

Hourly pay rate: $75-$80 USD

12-month contract

Hybrid or remote working arrangements

Healthcare technology sector exposure

Work with modern cloud platforms andPK

Job summary

Jobgether, on behalf of a partner, seeks a PKI Engineer, Consultant based in the United States to design, operate, and enhance enterprise certificate services across cloud and on‑prem environments.

You will own the full certificate lifecycle, build automation, and collaborate with security, platform, and application teams. Hybrid or remote work options are available for a contract lasting 12 months.

Qualifications

• 7+ years of PKI engineering or security infrastructure experience.
• Expert knowledge of certificate authority architecture and X.509 lifecycle.
• Hands-on experience with AWS or Azure PKI integrations.

Responsibilities

• Design, implement, and operate certificate authorities and PKI services.
• Manage certificate lifecycle: enrollment, issuance, renewal, revocation, monitoring.
• Develop automation to prevent outages from expired or misconfigured certificates.
• Integrate PKI with applications and workloads across on‑prem and cloud environments.
• Define IaC for PKI services and supporting cloud infrastructure.

Skills

PKI engineering

Cloud automation

Scripting: Python

Terraform

Security architecture

Tools

AWS

Azure

HSM

Terraform

CloudFormation

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a PKI Engineer, Consultant based in the United States.

Join a healthcare technology environment where secure, reliable infrastructure plays a critical role in protecting sensitive data and supporting essential services.

As a PKI Engineer, you will design, operate, and enhance enterprise certificate services across cloud and on-premises environments. You will take ownership of the full certificate lifecycle, building automated processes that strengthen security, reduce operational overhead, and prevent service disruptions. Working closely with security, platform, and application engineering teams, you will integrate PKI capabilities into modern infrastructure and development workflows. You will also explore practical applications of AI to improve operational efficiency while maintaining strong security controls. This contract opportunity is ideal for an experienced security engineer who enjoys solving complex infrastructure challenges and delivering reliable solutions at scale.

Accountabilities

• Design, implement, and operate certificate authorities, registration authorities, hardware security module (HSM) integrations, and certificate management services.
• Establish and maintain best practices for cryptographic key protection, access control, auditing, and recovery.
• Manage the complete certificate lifecycle, including enrollment, issuance, renewal, revocation, monitoring, and incident response.
• Develop automation to minimize manual certificate management tasks and prevent service outages caused by expired, invalid, or misconfigured certificates.
• Integrate PKI services with applications, devices, and workloads across on-premises environments and cloud platforms such as AWS and Azure.
• Define, implement, and maintain infrastructure as code for PKI services and their supporting cloud infrastructure.
• Troubleshoot certificate-related issues, including trust chain failures, TLS problems, and production service disruptions.
• Collaborate with security, platform, and application teams to make certificate management secure, scalable, and straightforward.
• Evaluate practical opportunities to use AI to improve operational workflows while ensuring appropriate security controls and human oversight.
• Document technical designs, operational procedures, and architecture decisions to support consistency and maintainability.

Requirements

• 7+ years of experience in PKI engineering, certificate services, or security infrastructure engineering.
• Expert knowledge of certificate authority architecture, certificate profiles and policies, cryptographic key management, revocation mechanisms, and the X.509 certificate lifecycle.
• Hands-on experience operating production PKI services and troubleshooting certificates, trust chains, and TLS-related issues.
• Experience with AWS or Azure and integrating certificate services with cloud-based workloads.
• Strong automation and scripting skills using Python, PowerShell, or Go.
• Experience with infrastructure as code tools such as Terraform, Bicep, or CloudFormation.
• Familiarity with certificate enrollment and automation protocols, including ACME, SCEP, or EST.
• Strong understanding of secure infrastructure design, access management, and operational security practices.
• Ability to document technical architectures and designs clearly.
• Excellent collaboration and communication skills, with the ability to work effectively across security, platform, and application engineering teams.
• Must be legally authorized to work in the United States without requiring employment sponsorship. W2 employment eligibility is required; C2C arrangements are not accepted.

Benefits

• Hourly pay rate: $75-$80 USD.
• Contract duration: 12 months.
• Hybrid or remote working arrangements.
• Opportunity to contribute to security infrastructure within the healthcare technology sector.
• Work with modern cloud platforms, automation technologies, and enterprise PKI systems.