PKI Engineer, Consultant

Releady; United States; Hybride; USD 103 000 - 110 000; Plein temps

Résumé du poste

Releady is seeking a Senior PKI Engineer to design, operate, and scale certificate services across cloud and on-prem environments. You will lead PKI architecture, lifecycle management, and automation, partnering with security and platform teams to secure identity across services.

The role emphasizes scalable certificate operations, cloud integrations (AWS/Azure), and IaC-driven infrastructure. Hybrid or remote work is allowed for residents in select states, with a 12-month contract and a pay

Qualifications

• 7+ years of PKI, certificate services, or security infra engineering.
• Expert knowledge of CA architecture, certificate profiles, and X.509 lifecycle.
• Hands-on production PKI operations, TLS issues, and trust chain troubleshooting.
• Experience with AWS or Azure and cloud-integrated certificate services.
• Automation proficiency in Python/PowerShell/Go; IaC with Terraform, Bicep, or CloudFormation.
• Familiar with ACME, SCEP, or EST enrollment and automation.

Responsabilités

• Design and operate CA, RA, and HSM integrations.
• Establish key protection, access controls, and audit practices.
• Own certificate enrollment, issuance, renewal, and revocation workflows.
• Build automation to reduce manual PKI work and prevent outages.
• Integrate PKI with applications and cloud services (AWS/Azure).
• Define IaC for PKI services and supporting cloud infra.
• Collaborate with security, platform, and application teams on identity workflows.
• Explore AI to improve operations with proper security controls.

Connaissances

PKI expertise

Automation

Cloud (AWS/Azure)

Scripting (Python/PowerShell/Go)

IaC (Terraform/Bicep/CloudFormation)

Certificate lifecycle management

Outils

Terraform

Bicep

CloudFormation

ACME/SCEP/EST protocols

Description du poste

OVERVIEW

Releady is partnering with a leading healthcare technology company to hire a Senior PKI Engineer. The organization builds the AI-powered technology platform that nonprofit and community health plans use to unify member, claims, clinical, and provider data, automate operations, and deliver better member experiences.

In this role, you will design, operate, and improve the company’s certificate services. You will bring deep public key infrastructure (PKI) expertise and use automation to make certificate issuance, renewal, and revocation reliable at scale. You will also integrate PKI with cloud services and development workflows, partnering closely with security, platform, and application teams on an identity platform engineering team.

NOTE: *Must be eligible to work on W2 without sponsorship. Not eligible for C2C.*

• Pay Rate: $75–$80/hr
• Duration: 12 months contract
• Location: Hybrid or Remote, however must reside in the following states: WA, OH, CA, AZ, CO, CT, FL, GA, MD, MN, NV, OR, AL, IL, VA, WI, TX, NY

RESPONSIBILITIES

PKI Architecture & Operations

• Design and operate certificate authorities, registration authorities, HSM integrations, and certificate management services.
• Establish sound practices for key protection, access control, auditing, and recovery.

Certificate Lifecycle Management

• Own certificate lifecycle processes, including enrollment, issuance, renewal, revocation, monitoring, and incident response.
• Build automation that reduces manual certificate work and prevents outages caused by expired or misconfigured certificates.

Cloud Integration & Infrastructure as Code

• Integrate PKI with applications, devices, and services running on premises and in AWS or Azure.
• Define and maintain infrastructure as code for PKI services and supporting cloud infrastructure.

Collaboration & Innovation

• Partner with security, platform, and application teams to make certificate use secure and straightforward.
• Evaluate practical uses of AI to improve operational workflows while applying appropriate review and security controls.

QUALIFICATIONS

• 7+ years of experience in PKI, certificate services, or security infrastructure engineering.
• Expert knowledge of CA architecture, certificate profiles and policies, key management, revocation, and the X.509 certificate lifecycle.
• Hands-on experience operating production PKI services and troubleshooting certificate, trust chain, and TLS issues.
• Experience with AWS or Azure and integrating certificate services with cloud workloads.
• Strong automation skills in Python, PowerShell, or Go, plus infrastructure as code experience with Terraform, Bicep, or CloudFormation.
• Familiarity with certificate enrollment and automation protocols such as ACME, SCEP, or EST.
• Ability to document designs clearly and work across security and engineering teams.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non-merit factor. We are committed to creating a diverse and inclusive environment for all employees.