Security Engineer

NLB Services; Atlanta (GA); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Employee Benefits

Job summary

Next Level Business Services Inc. is seeking a PKI Engineer to design, operate, and enhance the enterprise PKI and certificate management services, ensuring secure authentication, encryption, and lifecycle management across systems.

You will ensure availability, resiliency, and patching; support issuance/renewal; manage large-scale certificate environments; build automation; and collaborate with application and infrastructure teams to maintain compliance with standards and regulations.

Responsibilities

• Design, operate, and enhance the enterprise PKI and certificate management services.
• Ensure availability, resiliency, and patching of PKI infrastructure.
• Support certificate issuance, renewal, revocation, and lifecycle management.
• Manage large-scale certificate environments across applications and infrastructure.
• Ensure timely renewal and replacement of certificates.
• Support trust store management and certificate chain integrity.
• Build and implement automation for certificate lifecycle management.
• Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications).
• Deploy and operationalize tools such as connectors and automation pipelines.
• Enforce security policies related to certificate usage and cryptography.
• Define and maintain standards for certificate issuance, validity, and usage.
• Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives).
• Partner with application and infrastructure teams to enable certificate automation.
• Provide guidance and supporting tooling while ensuring clear ownership boundaries.
• Assist teams with onboarding to PKI services and automation.
• Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures.
• Support incident response involving certificate or encryption issues.
• Improve visibility and reporting for certificate health and compliance.
• Support adoption of new cryptographic standards (e.g., post-quantum cryptography).
• Assist in modernization of PKI architecture and tooling.
• Evaluate new solutions for scalability and resilience.

Job description

• The PKI Engineer is responsible for designing, operating, and enhancing the enterprise Public Key Infrastructure (PKI) and certificate management services. This role ensures secure authentication, encryption, and certificate lifecycle management across enterprise systems, supporting regulatory compliance and operational stability.
• Ensure availability, resiliency, and patching of PKI infrastructure
• Support certificate issuance, renewal, revocation, and lifecycle management
• Manage large-scale certificate environments across applications and infrastructure
• Ensure timely renewal and replacement of certificates
• Support trust store management and certificate chain integrity
• Build and implement automation for certificate lifecycle management
• Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications)
• Deploy and operationalize tools such as connectors and automation pipelines
• Enforce security policies related to certificate usage and cryptography
• Define and maintain standards for certificate issuance, validity, and usage
• Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives)
• Partner with application and infrastructure teams to enable certificate automation
• Provide guidance and supporting tooling while ensuring clear ownership boundaries
• Assist teams with onboarding to PKI services and automation
• Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures
• Support incident response involving certificate or encryption issues
• Improve visibility and reporting for certificate health and compliance
• Support adoption of new cryptographic standards (e.g., post-quantum cryptography)
• Assist in modernization of PKI architecture and tooling
• Evaluate new solutions for scalability and resilience

NLB Services is an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to race, color, religion, sex (including pregnancy, sexual orientation and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable law.

*Benefits: Eligible employees may receive medical, dental and vision insurance, and other benefits. Eligibility and benefit terms vary based on employment status and assignment.

*Reasonable Accommodation

NLB Services provides reasonable accommodations during the recruitment process as required by law. Applicants requiring an accommodation due to a disability, pregnancy-related limitation, or sincerely held religious belief, practice or observance may contact their recruiter or email [e-mail].

*Other Important Terms

• Applicants must be legally authorized to work in the United States.
• Any employment offer may be contingent upon job-related screening, employment verification and other requirements permitted by applicable law."