PKI Security Engineer

Prism IT Global; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Prism IT Global is seeking a PKI security engineer to lead design, implementation, and governance of public key infrastructure across on-prem and cloud environments in the United States. You will work with Venafi, AWS PKI services, HSMs, and certificate lifecycle management, ensuring compliance with FP PKI and related standards, while collaborating with IT, security, and business teams.

Strong scripting skills and experience with automation, monitoring, and incident response are essential to

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• Demonstrated experience in PKI, Venafi, digital certificate management, IBM Mainframe, scripting, and information security.
• Experience with Agile software development methodologies.
• Preferred certifications: CISSP, AWS Cloud Certificates, CISM, or other cyber security certifications.
• Support and mature the organization's PKI program including strategy, governance, implementation, operations, and regulatory alignment.
• Engage with system owners and IT stakeholders to provide PKI security guidance.

Responsibilities

• Support and mature the organization's PKI program including strategy, governance, and operations.
• Implement PKI solutions across cloud and on-prem environments and manage certificate lifecycle.
• Collaborate with IT, security, and business teams to ensure compliance with FP PKI policies.

Skills

Scripting platforms

PKI design

Cloud security

Certificate lifecycle

Identity management

Authentication

Authorization

Governance & compliance

Agile methodologies

PKI engineering

HSM design

HSPD-12 compliance

Security monitoring

Education

Bachelor's degree in Information Security or CS

Tools

PowerShell

Batch

JSON

Python

YAML

Venafi

KMS

CloudHSM

ACM

CloudFront

Secrets Manager

CloudTrail

IBM Mainframe encryption

Job description

• Good working experience with scripting platforms (PowerShell, Batch, JSON, Python, YAML, etc.).
• Expert in PKI design, implementation, administration, and provisioning in AWS. Extensive experience in AWS PKI services: KMS, CloudHSM, ACM, CloudFront, Secrets Manager, and CloudTrail.
• Experience with PKI-based products, including web servers and certification authorities, and common PKI-based protocols, including SSL and TLS, HTTPS, or LDAPS.
• A solid understanding of Public Key Infrastructure (PKI), including technology, standards, and implementations, with experience managing, configuring, or supporting a PKI certificate authority.
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Conduct technical research and set cloud security direction and strategy.
• Experience in automating certificate renewal and certificate life cycle management.
• Experience with Microsoft's PKI technologies and the latest Windows and Linux server platforms.
• Experience with integration of Venafi with Microsoft PKI technologies and public PKI providers.
• Experience with IBM Mainframe platform encryption (TKE, UKO, SGKLM, etc.).
• Experience in areas such as identity management, provisioning, authentication, authorization, certification/governance, and monitoring, including HSPD-12 compliance.
• Experience developing and implementing IT Contingency Plans.
• Preferred Qualifications & Skills
• Bachelor's Degree in Information Security, Computer Science, or a related field.
• Demonstrated professional experience in PKI, Venafi, digital certificate management, IBM Mainframe, scripting, and Information Security domains.
• Experience with Agile software development methodologies.
• Preferred one or more certifications: CISSP, AWS Cloud Certificates, CISM, or another Cyber Security-related certification.
• Support and mature the organization's PKI (Public Key Infrastructure) program, including strategy, governance, implementation, operations, and continuous alignment with compliance and regulatory requirements.
• Engage with system owners, business teams, and IT stakeholders in strategic discussions to provide best-in-class PKI security strategy and industry guidance to maximize long-term business objectives.
• Demonstrated ability to work independently, prioritize responsibilities, and design, implement, and manage PKI and security solutions.
• Solid understanding of PKI concepts and security properties.
• Support PKI-based products, including web servers and certification authorities, and common PKI-based protocols, including SSL and TLS, HTTPS, or LDAPS.
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Review and remediate defects in certificate system components.
• Develop certificate system components to implement new capabilities.
• Strong expertise in PKI engineering support and troubleshooting.
• Experience with HSM design and implementation.
• Working knowledge of OSI layer 2-7 security tactics and different kinds of attacks.