Senior Cloud PKI Engineer: Zero Trust & Crypto

Oil Authority; Houston (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

Chevron is seeking a senior PKI/identity engineer to design, operate, and modernize enterprise PKI and cryptographic services across cloud and hybrid environments.

The role focuses on certificate lifecycle management, HSM-backed key protection, and integration with AD/Entra ID for secure, identity-driven security controls. You will lead automation, incident response, and cross-team collaboration.

Qualifications

• Bachelor’s degree or equivalent experience in a relevant field.
• 12–15 years in Identity & Access Management, PKI, or security infrastructure engineering.
• Proven experience operating large-scale enterprise PKI environments.
• Strong understanding of cryptography, authentication, and trust models.
• Hands‑on expertise with PKI platforms, HSM, key management, automation, AD, and Entra ID.

Responsibilities

• PKI & Certificate Services: design, deploy, and manage enterprise PKI platforms; lifecycle management; post-quantum capabilities.
• Cloud & Hybrid Identity Integration: integrate PKI with AD and Entra ID for hybrid scenarios; certificate-based auth for workloads, APIs, devices.
• Security Engineering & Zero Trust: phishing-resistant authentication using FIDO2, PIV; Conditional Access and Zero Trust maturity.
• Privileged Access & Operational Security: integrate PKI with PAM (e.g., Delinea); secure admin environments; break-glass planning.
• Automation, Reliability & Operations: drive automation via scripting and APIs; disaster recovery and PKI modernization.
• Leadership & Stakeholder Engagement: act as PKI SME within Digital Identity; mentor engineers; collaborate across teams.

Skills

PKI expertise

Cloud & hybrid identity

Zero Trust security

Automation & scripting

HSM & key management

Active Directory / Entra ID

Education

Bachelor’s degree in computer science, Information Security, Engineering, or related field

Tools

Microsoft ADCS

DigiCert

NDES

HSM integration

Azure Cloud

Multi-cloud security

Job description

Chevron is seeking a senior PKI/identity engineer to design, operate, and modernize enterprise PKI and cryptographic services across cloud and hybrid environments.

The role focuses on certificate lifecycle management, HSM-backed key protection, and integration with AD/Entra ID for secure, identity-driven security controls. You will lead automation, incident response, and cross-team collaboration.