Public Key Infrastructure (PKI) & Encryption Engineer

InnoCore Solutions, Inc.; Dallas (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

InnoCore Solutions, Inc. seeks a PKI Engineer to design, implement, and support enterprise PKI and X.509 certificate infrastructure across on‑premises and cloud environments.

You will automate certificate lifecycle tasks with PowerShell and Python, using REST APIs and ACME, and work with Azure Key Vault and HashiCorp Vault as needed. Strong troubleshooting across TLS/SSL and encryption is expected.

Qualifications

• 3–5+ years hands-on PKI, certificate management, or related infrastructure engineering
• Strong knowledge of PKI architecture, X.509, TLS/SSL, CA/RA concepts, issuance, renewal, rotation, revocation
• Experience with enterprise CLM platforms such as Keyfactor, Venafi, DigiCert, Sectigo, or Microsoft ADCS
• Strong scripting and automation using PowerShell and/or Python, with REST APIs and certificate automation
• Experience troubleshooting TLS/SSL, certificate trust, encryption, and connectivity across enterprise infra

Responsibilities

• Design, implement, and support enterprise PKI and certificate infrastructure
• Administer CLM platforms across on‑premises, cloud, and applications
• Develop automation for certificate discovery, issuance, renewal, rotation, revocation
• Troubleshoot TLS/SSL, trust, and connectivity issues across systems

Skills

PKI architecture

X.509 certificates

TLS/SSL

Certificate lifecycle

PowerShell

Python

REST APIs

Automation

TLS troubleshooting

Education

Bachelor's degree (IT/CS/Cybersecurity/Engineering)

Tools

Keyfactor

Venafi

DigiCert

Sectigo

Microsoft ADCS

Azure Key Vault

HashiCorp Vault

Job description

• Design, implement, and support enterprise PKI and X.509 certificate infrastructure, including Certificate Authorities (CA), certificate issuance, enrollment, renewal, rotation, revocation, and TLS/SSL certificate management.
• Administer and integrate enterprise certificate lifecycle management platforms such as Keyfactor, Venafi, DigiCert, Sectigo, and Microsoft ADCS across application, infrastructure, and cloud environments.
• Develop PowerShell and Python automation using REST APIs, ACME, and platform-specific APIs to automate certificate discovery, provisioning, renewal, rotation, revocation, compliance monitoring, and reporting.
• Perform root cause analysis and troubleshooting of certificate, TLS/SSL, encryption, trust-chain, authentication, and connectivity issues across systems such as F5, NGINX, IIS, and enterprise applications.
• Design secure, scalable PKI and encryption solutions across Azure/AWS and on-premises environments, leveraging Azure Key Vault, HashiCorp Vault, infrastructure-as-code, and DevOps practices where applicable.
• Partner with Security, Infrastructure, Cloud, and DevOps teams to establish certificate security standards, encryption controls, automation, monitoring, technical risk mitigation, and reusable PKI solutions while reducing technical debt and operational overhead.

Requirements:

• 3–5+ years of hands‑on experience in PKI, certificate management, encryption, cybersecurity, or related infrastructure engineering.
• Strong knowledge of PKI architecture, X.509 certificates, TLS/SSL, certificate chains, CA/RA concepts, certificate issuance, renewal, rotation, and revocation.
• Experience with enterprise Certificate Lifecycle Management (CLM) platforms such as Keyfactor, Venafi, DigiCert, Sectigo, or Microsoft ADCS.
• Strong scripting and automation skills using PowerShell and/or Python, including REST APIs and certificate‑management automation.
• Experience troubleshooting TLS/SSL, certificate trust, authentication, encryption, and connectivity issues across enterprise infrastructure and applications.
• Understanding of cloud security, DevOps, CI/CD, Infrastructure as Code (IaC), secrets management, and automated certificate deployment.

Education:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related field.