PKI Engineer, Consultant

Jobgether; United States; Hybrid; USD 103,000 - 110,000; Full time

Job summary

Jobgether is seeking a PKI Engineer, Consultant based in the United States to design, operate, and enhance enterprise certificate services across cloud and on‑prem environments. You will own the full certificate lifecycle and build automation to strengthen security and reduce outages, collaborating with security, platform, and application teams.

This contract role emphasizes hybrid or remote work arrangements, with a focus on scalable PKI solutions and secure infrastructure in a healthcare

Qualifications

• 7+ years of PKI engineering experience in certificate services or security infra.
• Expert knowledge of CA architecture, certificate profiles, key management, revocation, and X.509 lifecycle.
• Hands-on experience operating production PKI services and troubleshooting certificates.
• Experience with AWS or Azure and cloud-based workloads integration.
• Strong automation and scripting using Python, PowerShell, or Go.
• Experience with infrastructure as code tools like Terraform, Bicep, or CloudFormation.
• Familiarity with enrollment/automation protocols such as ACME, SCEP, or EST.
• Ability to document architectures clearly and collaborate across teams.
• Legally authorized to work in the United States (W2 only).

Responsibilities

• Design, implement, and operate certificate authorities, registration authorities, HSM integrations, and certificate services.
• Maintain best practices for cryptographic key protection, access control, auditing, and recovery.
• Manage the full certificate lifecycle: enrollment, issuance, renewal, revocation, monitoring, incident response.
• Develop automation to minimize manual PKI tasks and prevent outages.
• Integrate PKI with applications and workloads across on-prem and cloud (AWS/Azure).
• Define and maintain IaC for PKI services and supporting cloud infra.
• Troubleshoot trust chains, TLS issues, and production disruptions.
• Collaborate with security, platform, and application teams for secure, scalable PKI.
• Explore AI opportunities to improve workflows with proper controls.
• Document designs and procedures to support consistency.

Skills

PKI engineering

Certificate management

Automation scripting

Cloud platforms

Documentation

Security operations

Tools

AWS

Azure

Terraform

Bicep

CloudFormation

ACME

SCEP

EST

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a PKI Engineer, Consultant based in the United States.

Join a healthcare technology environment where secure, reliable infrastructure plays a critical role in protecting sensitive data and supporting essential services. As a PKI Engineer, you will design, operate, and enhance enterprise certificate services across cloud and on-premises environments. You will take ownership of the full certificate lifecycle, building automated processes that strengthen security, reduce operational overhead, and prevent service disruptions. Working closely with security, platform, and application engineering teams, you will integrate PKI capabilities into modern infrastructure and development workflows. You will also explore practical applications of AI to improve operational efficiency while maintaining strong security controls. This contract opportunity is ideal for an experienced security engineer who enjoys solving complex infrastructure challenges and delivering reliable solutions at scale.

Accountabilities

Responsibilities

• Design, implement, and operate certificate authorities, registration authorities, hardware security module (HSM) integrations, and certificate management services.
• Establish and maintain best practices for cryptographic key protection, access control, auditing, and recovery.
• Manage the complete certificate lifecycle, including enrollment, issuance, renewal, revocation, monitoring, and incident response.
• Develop automation to minimize manual certificate management tasks and prevent service outages caused by expired, invalid, or misconfigured certificates.
• Integrate PKI services with applications, devices, and workloads across on-premises environments and cloud platforms such as AWS and Azure.
• Define, implement, and maintain infrastructure as code for PKI services and their supporting cloud infrastructure.
• Troubleshoot certificate-related issues, including trust chain failures, TLS problems, and production service disruptions.
• Collaborate with security, platform, and application teams to make certificate management secure, scalable, and straightforward.
• Evaluate practical opportunities to use AI to improve operational workflows while ensuring appropriate security controls and human oversight.
• Document technical designs, operational procedures, and architecture decisions to support consistency and maintainability.

Requirements

• 7+ years of experience in PKI engineering, certificate services, or security infrastructure engineering.
• Expert knowledge of certificate authority architecture, certificate profiles and policies, cryptographic key management, revocation mechanisms, and the X.509 certificate lifecycle.
• Hands-on experience operating production PKI services and troubleshooting certificates, trust chains, and TLS-related issues.
• Experience with AWS or Azure and integrating certificate services with cloud-based workloads.
• Strong automation and scripting skills using Python, PowerShell, or Go.
• Experience with infrastructure as code tools such as Terraform, Bicep, or CloudFormation.
• Familiarity with certificate enrollment and automation protocols, including ACME, SCEP, or EST.
• Strong understanding of secure infrastructure design, access management, and operational security practices.
• Ability to document technical architectures and designs clearly.
• Excellent collaboration and communication skills, with the ability to work effectively across security, platform, and application engineering teams.
• Must be legally authorized to work in the United States without requiring employment sponsorship. W2 employment eligibility is required; C2C arrangements are not accepted.

Benefits

• Hourly pay rate: $75-$80 USD.
• Contract duration: 12 months.
• Hybrid or remote working arrangements.
• Opportunity to contribute to security infrastructure within the healthcare technology sector.
• Work with modern cloud platforms, automation technologies, and enterprise PKI systems.

Data Privacy Notice

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

We appreciate your interest and wish you the best!