Public Key Infrastructure (PKI) Engineer

Amatriot Group, LLC; Dallas (TX); On-site; USD 85,000 - 145,000; Full time

Job summary

A cybersecurity firm is seeking an experienced Public Key Infrastructure (PKI) Engineer to design, implement, and manage secure certificate services. The role involves automating PKI processes across enterprise environments, collaborating with security teams, and ensuring compliance with cryptographic standards. Candidates should have 10+ years in IT and 3+ years in a PKI environment, with hands-on experience in encryption technologies. The ideal applicant will thrive in a fast-paced team culture, focused on quality outcomes and collaboration.

Qualifications

• 10+ years of experience in IT infrastructure or related fields.
• 3+ years in a PKI environment dealing with CA and certificate management.
• Experience with encryption and PKI technologies is essential.

Responsibilities

• Design and manage PKI and certificate lifecycle management processes.
• Collaborate with teams to integrate PKI solutions.
• Automate certificate issuance, renewal, and revocation processes.

Skills

PKI environment experience

Encryption technologies (TLS, PGP)

Scripting languages (Python, PowerShell)

Organization and prioritization skills

Tools

Venafi

Ansible

AWS cloud services

Job description

Career Opportunities with Amatriot Group, LLC

A great place to work.

Share with friends or Subscribe!

Are you ready for new challenges and new opportunities?

Join our team!

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Salary: $85,000 - $145,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Job Overview

We are seeking an experienced Public Key Infrastructure (PKI) Engineer responsible for the design, implementation, and management of secure certificate and encryption services across enterprise environments. This role will focus on automating and managing Public Key Infrastructure processes, ensuring platform-level authentication across Windows and Unix systems, and integrating PKI controls with infrastructure and security operations. The ideal candidate has a strong understanding of cryptographic principles, automation, and compliance-focused design.

Key Responsibilities

• Design, implement, and manage PKI and certificate lifecycle management processes and controls.
• Integrate certificate authority (CA) management with enterprise authentication platforms (e.g., Active Directory, Unix-based systems).
• Collaborate with security and infrastructure teams to ensure full integration and automation of PKI solutions.
• Assess and implement encryption technologies including TLS, PGP, and HSM for data protection.
• Automate and manage certificate issuance, renewal, and revocation using industry tools.
• Evaluate and maintain cryptographic standards and practices for enterprise systems.
• Ensure compliance and auditability of PKI solutions through effective documentation and tooling.
• Support secure infrastructure design by implementing and reviewing cryptographic and authentication mechanisms.
• Contribute to Agile team environments (Scrum, Kanban) with focus on continuous integration and delivery.
• Prioritize and manage multiple ongoing initiatives, balancing delivery timelines and technical quality.

Required Skills & Experience

• 10+ years of experience in IT infrastructure or related fields with demonstrated design and engineering capabilities.
• 3+ years working in a PKI environment, including experience with CA and certificate lifecycle management.
• Hands-on experience with encryption and cryptographic technologies such as TLS, PGP, PKI, and HSM.
• Solid understanding of key management, tokenization, and data masking.
• Knowledge of system vulnerabilities, penetration testing methods, and remediation techniques.
• Proficiency with scripting languages such as Python, PowerShell, Bash, or KornShell (KSH).
• Experience with Linux platforms; familiarity with Windows Server is a plus.
• Ability to collaborate across technical teams and effectively communicate with stakeholders at all levels.
• Strong organizational and prioritization skills, able to manage multiple projects with competing demands.
• Familiarity with Agile methodologies and DevSecOps principles.

Preferred Qualifications

• Experience with certificate management tools such as Venafi, Keyfactor, or similar platforms.
• Working knowledge of Entrust or other public certificate providers.
• Experience with configuration and infrastructure automation tools such as Ansible, Puppet, or Terraform.
• Familiarity with Identity and Access Management (IAM) tools such as IBM TIM/TAM.
• Exposure to IoT device security and management is a plus.
• Hands-on experience with Red Hat technologies, including Identity Management (IdM), RHV, Satellite, RHDS, and Ceph.
• Experience with AWS cloud services, including EC2, S3, Lambda, RDS, ALB/NLB.
• Proven ability to design, optimize, and troubleshoot public cloud infrastructure and complex application stacks.
• Background in architectural or design roles such as Solutions Architect, Technical Architect, or Technical Design Authority.

Team Culture

Our team is highly energetic, fast-paced, and committed to delivering quality outcomes. We value motivation, innovation, and collaboration, fostering a culture where individual effort directly impacts success. Team members are encouraged to set challenging but realistic goals and take ownership of their work while contributing to a results-driven, solution-focused environment.