Senior Certificate Automation Engineer

Truist; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Incentive pay

Benefits package

Paid time off

Job summary

Truist is seeking a senior-level security automation engineer in the Atlanta area to advance and scale certificate automation across the enterprise. The role focuses on automated deployment, installation, and validation across servers, load balancers, middleware, and application environments.

You will extend Venafi-based issuance/renewal into full lifecycle automation, building repeatable install processes and ensuring certificates are trusted and actively serving traffic.

Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• 7+ years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Design and implement automation solutions focused on certificate installation, deployment, and binding across enterprise platforms (servers, load balancers, web servers, and middleware).
• Extend existing certificate automation (e.g., Venafi issuance / renewal) into end-to-end lifecycle automation, with emphasis on the “last mile” deployment.
• Develop and maintain automation frameworks using such tools as Ansible, APIs, and scripting to enable consistent and repeatable certificate installs.
• Integrate certificate automation with infrastructure platforms including load balancers (e.g., F5), web servers (IIS, Apache, NGINX), application, and database servers.
• Partners with application and infrastructure teams to onboard systems to automated certificate deployment, reducing manual installation and configuration errors.
• Establish and enforce standardized deployment patterns for certificate installation across common platforms.
• Implement pre- and post-installation validation controls to confirm certificates are correctly deployed, trusted, and actively serving traffic.
• Identify and remediate gaps in certificate deployment processes that contribute to outages, failed renewals, or misconfigurations.
• Support troubleshooting and root cause analysis of certificate-related incidents, with a focus on eliminating recurring issues through automation.
• Collaborate with engineering and business teams to align automation solutions with operational requirements and risk management objectives.
• Contribute to enterprise initiatives supporting shortened certificate lifecycle and crypto agility, ensuring automation solutions scale with increasing renewal frequency.
• Provide technical leadership and guidance on certificate deployment with best practices and automation strategies.
• Lead or contribute to projects with moderate to high complexity, driving delivery of scalable and resilient solutions.

Skills

Security engineering

Threat modeling

Penetration testing

SDLC security

Automation tooling

Cross-functional collaboration

Education

Bachelor’s degree or equivalent

Tools

Venafi

Ansible

Python

APIs

ServiceNow

F5

IIS

Apache

NGINX

Job description

Truist is seeking a senior-level security automation engineer in the Atlanta area to advance and scale certificate automation across the enterprise. The role focuses on automated deployment, installation, and validation across servers, load balancers, middleware, and application environments.

You will extend Venafi-based issuance/renewal into full lifecycle automation, building repeatable install processes and ensuring certificates are trusted and actively serving traffic.