PKI Engineer, Consultant - Hybrid

Releady; San Francisco (CA); Hybrid; USD 103,000 - 117,000; Full time

Job summary

Releady is hiring a Senior PKI Engineer to design, operate, and improve the company’s certificate services at scale. You will integrate PKI with cloud workloads and development workflows, partnering with security, platform, and application teams on an identity platform engineering team.

The role focuses on designing robust CA architectures, automating certificate issuance, renewal, and revocation, and ensuring secure key protection and access controls across hybrid environments.

Qualifications

• 7+ years of PKI, certificate services, or security infrastructure engineering experience.
• Expert knowledge of CA architecture, certificate profiles and policies, key management, revocation, and X.509 lifecycle.
• Hands-on experience operating production PKI services and troubleshooting TLS issues.

Responsibilities

• Design and operate certificate authorities, registration authorities, HSM integrations, and certificate management services.
• Own certificate lifecycle processes including enrollment, issuance, renewal, revocation, monitoring, and incident response.
• Integrate PKI with apps, devices, and services on premises and in AWS or Azure.
• Collaborate with security, platform, and application teams to secure certificate use and improve workflows.

Skills

PKI architecture

Certificate services

Automation (Python/PowerShell/Go)

Cloud integration (AWS/Azure)

Infrastructure as Code (Terraform/Bice

Job description

OVERVIEW

Releady is partnering with a leading healthcare technology company to hire a Senior PKI Engineer. The organization builds the AI-powered technology platform that nonprofit and community health plans use to unify member, claims, clinical, and provider data, automate operations, and deliver better member experiences.

In this role, you will design, operate, and improve the company’s certificate services. You will bring deep public key infrastructure (PKI) expertise and use automation to make certificate issuance, renewal, and revocation reliable at scale. You will also integrate PKI with cloud services and development workflows, partnering closely with security, platform, and application teams on an identity platform engineering team.

NOTE: Must be able to work in the United States without sponsorship. Not eligible for C2C

Employment Type:6 month - contract-to-hire

Location: Hybrid — 2x/week onsite; San Diego, Long Beach, Sacramento, Rancho Cordova, or Oakland (SF Bay Area)

Compensation: $75 – $85/hr

RESPONSIBILITIES

PKI Architecture & Operations

• Design and operate certificate authorities, registration authorities, HSM integrations, and certificate management services.
• Establish sound practices for key protection, access control, auditing, and recovery.

Certificate Lifecycle Management

• Own certificate lifecycle processes, including enrollment, issuance, renewal, revocation, monitoring, and incident response.
• Build automation that reduces manual certificate work and prevents outages caused by expired or misconfigured certificates.

Cloud Integration & Infrastructure as Code

• Integrate PKI with applications, devices, and services running on premises and in AWS or Azure.
• Define and maintain infrastructure as code for PKI services and supporting cloud infrastructure.

Collaboration & Innovation

• Partner with security, platform, and application teams to make certificate use secure and straightforward.
• Evaluate practical uses of AI to improve operational workflows while applying appropriate review and security controls.

QUALIFICATIONS

• 7+ years of experience in PKI, certificate services, or security infrastructure engineering.
• Expert knowledge of CA architecture, certificate profiles and policies, key management, revocation, and the X.509 certificate lifecycle.
• Hands-on experience operating production PKI services and troubleshooting certificate, trust chain, and TLS issues.
• Experience with AWS or Azure and integrating certificate services with cloud workloads.
• Strong automation skills in Python, PowerShell, or Go, plus infrastructure as code experience with Terraform, Bicep, or CloudFormation.
• Familiarity with certificate enrollment and automation protocols such as ACME, SCEP, or EST.
• Ability to document designs clearly and work across security and engineering teams.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non-merit factor. We are committed to creating a diverse and inclusive environment for all employees.