Senior PKI & Cloud Security Engineer

Chevron; Houston (TX); On-site; USD 180,000 - 230,000; Full time

Job summary

Chevron seeks a senior PKI/Cloud Engineer to design, operate, and modernize enterprise PKI and cryptographic services across cloud and hybrid environments. You will own certificate lifecycle management, HSM-backed key protection, and integration with Active Directory and Microsoft Entra ID to enable certificate-based authentication for workloads and devices.

The role emphasizes phishing-resistant authentication, post-quantum readiness, and alignment with Azure/multi-cloud security architectures,

Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, or related field (or equivalent experience)
• 12–15 years in Identity & Access Management, PKI, or security infrastructure engineering
• Proven experience operating large-scale enterprise PKI environments
• Strong understanding of cryptography, authentication, and trust models
• Hands-on expertise with PKI platforms, HSM, key management, automation, Active Directory, and Microsoft Entra ID

Responsibilities

• Design, deploy, and manage enterprise PKI platforms (Microsoft ADCS, DigiCert, NDES, cloud-integrated services)
• Own certificate lifecycle management (issuance, renewal, revocation, compliance, automation)
• Implement post-quantum cryptography capabilities aligned to business and regulatory requirements
• Manage HSM-backed key protection and integration with key management systems
• Integrate PKI with Active Directory and Microsoft Entra ID for hybrid identity scenarios
• Enable certificate-based authentication for workloads, APIs, devices, VPN, and service accounts
• Align PKI services with Azure and multi-cloud security architectures
• Implement phishing-resistant authentication using FIDO2, PIV, and certificate-based methods
• Support Conditional Access policies leveraging identity, device posture, and risk signals
• Advance Zero Trust maturity and continuous security posture improvement
• Integrate PKI with PAM solutions (e.g., Delinea) for secure service account authentication
• Lead break-glass and recovery scenarios using secure access controls
• Drive automation using scripting, APIs, and orchestration to reduce manual processes
• Lead disaster recovery exercises, upgrades, and PKI platform modernization
• Provide advanced engineering support, incident response, and root cause analysis
• Serve as a PKI subject matter expert within Digital Identity – Protection
• Collaborate across security, cloud, and operations teams
• Mentor engineers and contribute to standards and operational excellence

Skills

Identity & Access Management

PKI

Security infrastructure engineering

Cloud and hybrid environments

Automation & Scripting

Education

Bachelor's degree in computer science or related

Tools

Active Directory

Microsoft Entra ID

HSM

Key management

DigiCert

Job description

Chevron seeks a senior PKI/Cloud Engineer to design, operate, and modernize enterprise PKI and cryptographic services across cloud and hybrid environments. You will own certificate lifecycle management, HSM-backed key protection, and integration with Active Directory and Microsoft Entra ID to enable certificate-based authentication for workloads and devices.

The role emphasizes phishing-resistant authentication, post-quantum readiness, and alignment with Azure/multi-cloud security architectures,