PKI Security Engineer

Droisys; Atlanta (GA); On-site; USD 140,000 - 200,000; Full time

Job summary

Droisys is seeking a Sr. PKI Security Engineer in Atlanta (onsite/hybrid) to design, operate, and enhance enterprise PKI and certificate management services.

You will enable secure authentication, encryption, and lifecycle management across critical systems while ensuring regulatory compliance. The role requires 3-7+ years in PKI/security engineering, hands-on experience with Venafi, DigiCert, MS CA, and AWS ACM, and strong knowledge of TLS/SSL and HSMs.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
• 3-7+ years of experience in PKI, cybersecurity engineering, or infrastructure security.
• Hands-on experience with certificate lifecycle management.
• Experience with PKI tools and platforms such as Venafi, DigiCert, Microsoft CA, and AWS ACM.

Responsibilities

• The PKI Engineer designs, operates, and enhances enterprise PKI and certificate management services.
• Support certificate issuance, renewal, revocation, and lifecycle management across applications and infrastructure.
• Build and implement certificate lifecycle automation and integrate PKI with CI/CD pipelines, cloud services, and enterprise apps.
• Identify and remediate risks related to certificate expiration, misconfigurations, and trust failures.

Skills

PKI engineering

Security engineering

Automation

Cloud security

Education

Bachelor's degree in Computer Science or related field

Tools

Venafi

DigiCert

Microsoft CA

AWS ACM

Job description

Droisys is an innovation technology company focused on helping companies accelerate their digital initiatives from strategy and planning through execution. We leverage deep technical expertise, Agile methodologies, and data-driven intelligence to modernize systems of engagement and simplify human/tech interaction.

Amazing things happen when we work in environments where everyone feels a true sense of belonging and when candidates have the requisite skills and opportunities to succeed. At Droisys, we invest in our talent and support career growth, and we are always on the lookout for amazing talent who can contribute to our growth by delivering top results for our clients. Join us to challenge yourself and accomplish work that matters.

Here are the job details

Sr. PKI Security Engineer

Atlanta, GA - Onsite/Hybrid

Long Term

Role Overview

The PKI Engineer designs, operates, and enhances enterprise Public Key Infrastructure (PKI) and certificate management services. The role enables secure authentication, encryption, and certificate lifecycle management across enterprise systems while supporting regulatory compliance and operational stability.

PKI Responsibilities

Infrastructure and Certificate Lifecycle Management

• Maintain the availability, resilience, and patching of PKI infrastructure.
• Support certificate issuance, renewal, revocation, and lifecycle management, ensuring timely renewal and replacement.
• Manage large-scale certificate environments across applications and infrastructure.
• Maintain trust stores and certificate chain integrity.

Automation and Enterprise Integration

• Build and implement certificate lifecycle automation.
• Integrate PKI services with CI/CD pipelines, cloud services, and enterprise applications.
• Deploy and operationalize connectors and automation pipelines.
• Partner with application and infrastructure teams to enable certificate automation and onboard them to PKI services.
• Provide guidance and supporting tools while maintaining clear ownership boundaries.

Security Standards and Compliance

• Enforce security policies governing certificate use and cryptography.
• Define and maintain standards for certificate issuance, validity, and usage.
• Support compliance with frameworks and directives such as NIST, CMMC, PCI, and TSA directives.

Risk Management and Incident Support

• Identify and remediate risks involving certificate expiration, misconfiguration, and trust failures.
• Support incident response for certificate and encryption issues.
• Improve visibility and reporting on certificate health and compliance.

PKI Modernization

• Support the adoption of new cryptographic standards, including post-quantum cryptography.
• Assist with modernizing PKI architecture and tools.
• Evaluate new solutions for scalability and resilience.

Qualifications and Technical Experience

Education and Experience

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
• 3-7+ years of experience in PKI, cybersecurity engineering, or infrastructure security.

PKI and Cryptography

• Hands-on experience with certificate lifecycle management.
• Experience with PKI tools and platforms such as Venafi, DigiCert, Microsoft CA, and AWS ACM.
• Understanding of TLS/SSL, cryptographic principles, and key management.
• Experience with hardware security modules (HSMs) and key custody operations.
• Familiarity with trust store management across distributed systems.

Automation, Cloud, and Enterprise Environments

• Experience with PKI automation using APIs, pipelines, and scripting.
• Experience with cloud certificate services in AWS and Azure.
• Experience scaling PKI in large enterprise environments.
• Knowledge of NIST, PCI-DSS, and CMMC compliance frameworks.

Broader Information Security Responsibilities

Design, test, evaluate, implement, deploy, support, and manage security systems and devices that safeguard the organization's information assets. Assess the information security environment and help develop controls to prevent accidental or unauthorized modification, destruction, or disclosure of information.

Security Engineering and Access Controls

• Configure and install firewalls, intrusion detection systems, data encryption, and other security measures.
• Build, deploy, and track security measures for computer systems and networks, and implement tools and solutions to mitigate vulnerabilities.
• Collaborate on authentication, authorization, and encryption solutions.
• Maintain access by providing information, resources, and technical support. Investigate improper access, revoke access when appropriate, report violations, monitor information requests from new programs, and recommend improvements.
• Establish system control frameworks and access levels, and recommend enhancements.
• Develop physical security standards, policies, and procedures for computers and terminals in coordination with facilities security.

Security Assessment and Incident Response

• Perform vulnerability testing, risk analyses, security assessments, and risk-based testing of data processing systems.
• Assess data sensitivity to determine appropriate security requirements.
• Test security solutions against industry-standard analysis criteria, and prepare technical reports and formal papers on findings.
• Address information security issues throughout the project lifecycle.
• Investigate intrusions, conduct forensic investigations, coordinate incident responses, and work with technical teams to recover data after breaches.
• Develop automation scripts to manage and track incidents, and design infrastructure that alerts technical teams to detected vulnerabilities.
• Communicate data security breaches to technical teams, management, and users across the company.

Resilience and Disaster Recovery

• Safeguard files through regular backups, source code management procedures, and disaster preparedness, and recommend improvements.
• Create, test, and implement network disaster recovery plans.

Governance, Technology, and Change Management

• Define, implement, and maintain corporate security policies.
• Evaluate new security technologies and processes, and advise on their adoption and conformance with security programs.
• Develop proposals, assess cost-effective equipment options, and recommend security enhancements and purchases.
• Oversee changes to software, hardware, facilities, telecommunications, and user requirements.
• Recommend modifications in legal, technical, and regulatory areas that affect IT security.

Training and Professional Development

• Train staff on network and information security procedures.
• Promote security awareness through orientation, educational programs, and ongoing communication.
• Maintain professional knowledge through education, publications, professional networks, and industry organizations.
• Support information systems and organizational objectives by completing related work as needed.

Droisys is an equal opportunity employer. We do not discriminate based on race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. Droisys believes in diversity, inclusion, and belonging, and we are committed to fostering a diverse work environment.