Senior Cloud PKI Engineer for Enterprise Security

Chevron Corporation; Houston (TX); On-site; USD 180,000 - 240,000; Full time

Job summary

Chevron Corporation seeks a senior Cloud Engineer to design, operate, and modernize enterprise PKI and cryptographic services across cloud and hybrid environments. You will enable secure certificate lifecycle management, key protection, and identity‑driven security controls to support Zero Trust adoption.

Responsibilities include PKI design and deployment, certificate lifecycle ownership, and integration with AD/Entra ID, plus phishing‑resistant authentication and post‑quantum capabilities.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field (or equivalent experience).
• 12–15 years in Identity & Access Management, PKI, or security infrastructure engineering.
• Proven experience operating large‑scale enterprise PKI environments.
• Strong understanding of cryptography, authentication, and trust models.

Responsibilities

• PKI & Certificate Services: Design, deploy, and manage enterprise PKI platforms (Microsoft ADCS, DigiCert, NDES, cloud‑integrated services).
• Own certificate lifecycle management (issuance, renewal, revocation, compliance, automation).
• Implement post‑quantum cryptography capabilities aligned to business and regulatory requirements.
• Manage HSM‑backed key protection and integration with key management systems.
• Cloud & Hybrid Identity Integration; Integrate PKI with Active Directory and Microsoft Entra ID for hybrid identity scenarios.
• Enable certificate‑based authentication for workloads, APIs, devices, VPN, and service accounts.
• Align PKI services with Azure and multi‑cloud security architectures.

Skills

PKI

HSM

Azure Entra ID

Zero Trust

ADCS

Automation

Certificate lifecycle

Education

Bachelor’s degree

Tools

DigiCert

NDES

Active Directory

Microsoft Entra ID

Job description

Chevron Corporation seeks a senior Cloud Engineer to design, operate, and modernize enterprise PKI and cryptographic services across cloud and hybrid environments. You will enable secure certificate lifecycle management, key protection, and identity‑driven security controls to support Zero Trust adoption.

Responsibilities include PKI design and deployment, certificate lifecycle ownership, and integration with AD/Entra ID, plus phishing‑resistant authentication and post‑quantum capabilities.