Public Key Infrastructure (PKI) & Encryption Engineer

Stellar IT Solutions LLC; Fort Worth (TX); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Stellar IT Solutions LLC in Fort Worth, TX is seeking a PKI & Encryption Engineer for a 6-12+ month hybrid contract. You will design and implement secure PKI solutions, manage certificate lifecycles, and automate processes across teams.

The role requires PKI/X.509 expertise and 3–5 years of related experience, with scripting in PowerShell and Python, and experience with enterprise tooling (Keyfactor, Venafi, Azure Vault, AWS/Azure, DevOps/IaC).

Qualifications

• PKI and X.509 expertise including TLS/SSL, certificate issuance, renewal, revocation.
• Experience with enterprise certificate lifecycle management (Keyfactor, Venafi, DigiCert, Sectigo, ADCS).
• Automation and scripting with PowerShell, Python, and APIs.
• 3-5 years related experience in PKI/security engineering.

Responsibilities

• Writes, tests, and documents technical work products per standards.
• Solves technical problems and builds impactful components/libraries.
• Delivers high quality work and mentors junior engineers.
• Conducts root cause analysis and leads corrective actions.
• Designs integrated systems enabling cross-team value delivery.
• Oversees technical debt management and elimination opportunities.
• Anticipates scaling, latency, and durability issues; guides mitigations.
• Partners with security to embed security early in lifecycle.
• Evaluates risks and directs prevention strategies.
• Reflects on squad delivery and drives improvements with leadership.

Skills

PKI & X.509 expertise

Certificate lifecycle management

Automation & scripting

PowerShell

Python

APIs

3-5 years experience

Tools

Keyfactor Command

EJBCA

Azure Key Vault

HashiCorp Vault

ACME

Azure/AWS

F5

NGINX

IIS

DevOps/IaC

Job description

Public Key Infrastructure (PKI) & Encryption Engineer

Fort Worth, TX (Hybrid, 3 days onsite)

6-12+ Months contract

Responsibilities

• Writes, tests, and documents technical work products (e.g., code, scripts, processes) according to organizational standards and practices
• Solves technical problems and builds components/libraries with far-ranging impact
• Delivers high quality work and coaches more junior engineers on technical craftsmanship
• Conducts root cause analysis to identify systemic problems and defines and leads execution of action items to address
• Designs thoughtfully integrated systems that model organizational best practices, allowing disparate teams across product domains to deliver value with speed, scale, and reliability
• Oversees the management of technical debt in existing systems and drives opportunities to eliminate within ongoing implementations
• Consistently anticipates scaling, latency, and durability challenges and guides teams in implementation of mitigating strategies
• Partners with the security organization to incorporate security conscious practices early in the lifecycle of new systems
• Thoughtfully evaluates technical risks and guides toward practical prevention strategies
• Consistently reflects on squad delivery practices throughout their span of influence, recommends improvements to leadership and drives their implementation
• Maintains a focus on removing the duplication of effort across teams and proactively identifies opportunities for reuse within their span of influence
• Thoughtfully measures and assesses team and identifies areas of development for individuals
• Explores emerging technologies, leads development of prototypes with little or no guidance and incorporates into architectural solutions where appropriate

Top Requirements

• PKI and X.509 certificate expertise (TLS/SSL, CA, issuance, renewal, revocation)
• Enterprise certificate lifecycle management experience (Keyfactor, Venafi, DigiCert, Sectigo, ADCS, etc.)
• Automation and scripting experience (PowerShell, Python, APIs)
• 3-5 years related experience

Nice to Have

• Keyfactor Command, EJBCA, Azure Key Vault, HashiCorp Vault, ACME, Azure/AWS, F5, NGINX, IIS, DevOps/IaC experience