Public Key Infrastructure (PKI) & Encryption Engineer

ZealHire Inc.; Fort Worth (TX); Hybrid; USD 110,000 - 170,000; Full time

Job summary

ZealHire Inc. is seeking a PKI and Encryption Engineer in Fort Worth, TX. This hybrid role focuses on enterprise certificate management, X.509, TLS/SSL, and automation to design, maintain, and improve secure PKI solutions across the organization.

Responsibilities include lifecycle management, automation, troubleshooting, root cause analysis, and collaborating with security teams to apply secure development practices. Local candidates preferred.

Qualifications

• 3–5 years of PKI, encryption, or related security engineering experience.
• Strong knowledge of X.509, TLS/SSL, and CA concepts.
• Experience with certificate issuance, renewal, and revocation.
• Enterprise certificate lifecycle management experience.
• Familiarity with major certificate management platforms.

Responsibilities

• Manage and support enterprise PKI and encryption solutions.
• Handle X.509 certificates, TLS/SSL, and certificate authorities.
• Build scripts and automation tools for certificate workflows.
• Write tests and document processes and code.
• Perform root cause analysis and tough troubleshooting.
• Design scalable systems with secure development practices.
• Integrate PKI with applications, infra, and DevOps tools.

Skills

PKI & Encryption

TLS/SSL

Scripting: PowerShell/Python

Certificate Lifecycle Mgmt

Root cause analysis

Tools

Keyfactor

Venafi

DigiCert

Microsoft ADCS

Azure Key Vault

HashiCorp Vault

Job description

Public Key Infrastructure (PKI) & Encryption Engineer | JPC-8500

Onsite Interview Required(2nd round) No Third Layer candidates.

Job ID: AAJP00011515

Location: 4700 American Boulevard Fort Worth, TX 76155 (Hybrid) Need LOCALS ONLY

Durations: 6-12+ Months with possible extension and conversions.

Interview Process: Two rounds – first virtual, second onsite

Job Overview:

We are looking for a PKI and Encryption Engineer with strong experience in enterprise certificate management, X.509 certificates, TLS/SSL, certificate authorities, and automation.

The selected candidate will help design, maintain, and improve secure PKI solutions used across the organization. This person will work on certificate lifecycle management, automation, system integration, troubleshooting, root cause analysis, and security-focused engineering practices.

Required:

• 3–5 years of experience in PKI, encryption, certificate management, or related security engineering.
• Strong knowledge of PKI and X.509 certificates.
• Experience with TLS/SSL, certificate authorities, certificate issuance, renewal, and revocation.
• Enterprise certificate lifecycle management experience.
• Experience with one or more certificate management platforms, such as:
  • Keyfactor
  • Venafi
  • DigiCert
  • Sectigo
  • Microsoft ADCS
• Strong scripting and automation experience using PowerShell, Python, or similar tools.
• Experience working with APIs and integrating security tools or platforms.
• Strong troubleshooting, problem-solving, and root cause analysis skills.
• Ability to write technical documentation and maintain high-quality work products.

Preferred:

• Experience with Keyfactor Command.
• Experience with EJBCA.
• Knowledge of Azure Key Vault or HashiCorp Vault.
• Experience with ACME protocol.
• Experience with Azure or AWS security services.
• Experience with F5, NGINX, or IIS.
• Experience with DevOps, CI/CD, Infrastructure as Code, or cloud automation.
• Experience integrating certificate management with application and infrastructure platforms.

Responsibilities:

• Manage and support enterprise PKI and encryption solutions.
• Work with X.509 certificates, TLS/SSL, certificate authorities, issuance, renewal, and revocation.
• Build scripts, automation tools, components, and reusable libraries.
• Write technical tests and document code, processes, and technical work products.
• Troubleshoot complex technical issues and perform root cause analysis.
• Identify systemic problems and lead corrective action plans.
• Design reliable and scalable systems that follow organizational best practices.
• Monitor and manage technical debt in existing systems.
• Identify and address challenges related to scalability, latency, availability, and durability.
• Partner with security teams to apply secure development practices early in the system lifecycle.
• Evaluate technical risks and recommend practical prevention and mitigation strategies.
• Identify opportunities to reduce duplication and create reusable solutions across teams.
• Support continuous improvement of engineering and delivery practices.
• Coach junior engineers and provide guidance on technical standards.
• Evaluate emerging technologies and develop prototypes when needed.
• Integrate PKI solutions with applications, infrastructure, DevOps tools, and enterprise platforms.

$000,000 – $000,000 Salary range is not shown on the candidate portal

Apply before Oct 23, 2026 — don't miss this opportunity!