Senior Certificate Automation & PKI Engineer

Truist; Charlotte (NC); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) plan

Paid vacation

Paid holidays

Sick days

Job summary

Truist is seeking a Security Automation Engineer focused on certificate automation and lifecycle orchestration across enterprise infrastructure. You will drive end-to-end deployment, installation, validation, and renewal workflows, partnering with applications, infrastructure, and business teams to reduce risk and improve reliability.

The role requires 7+ years in security engineering, deep PKI knowledge, and hands-on automation using Ansible, Python, and API integrations.

Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• Minimum of 7 years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Design and implement automation solutions focused on certificate installation, deployment, and binding across enterprise platforms (servers, load balancers, web servers, and middleware).
• Extend existing certificate automation into end-to-end lifecycle automation, with emphasis on the “last mile” deployment.
• Develop and maintain automation frameworks using such tools as Ansible, APIs, and scripting to enable consistent and repeatable certificate installs.
• Integrate certificate automation with infrastructure platforms including load balancers (F5), web servers (IIS, Apache, NGINX), application, and database servers.
• Lead or contribute to projects with moderate to high complexity, driving delivery of scalable and resilient solutions.

Skills

Security engineering

Threat modeling

CI/CD security

Automation leadership

Cross-functional collaboration

Education

Bachelor's degree or equivalent

Tools

Venafi

Ansible

Python

APIs

F5 Load Balancer

IIS

Apache

NGINX

ServiceNow

Job description

Truist is seeking a Security Automation Engineer focused on certificate automation and lifecycle orchestration across enterprise infrastructure. You will drive end-to-end deployment, installation, validation, and renewal workflows, partnering with applications, infrastructure, and business teams to reduce risk and improve reliability.

The role requires 7+ years in security engineering, deep PKI knowledge, and hands-on automation using Ansible, Python, and API integrations.