Senior PKI / Cryptographic Engineer

Tranzeal Incorporated; Denver (CO); On-site; USD 140,000 - 190,000; Full time

Job summary

Tranzeal Incorporated is seeking a Senior PKI / Cryptographic Engineer (W2) to lead enterprise certificate management, cryptographic platforms, and automation strategy. You will architect PKI solutions, harden infrastructure, and automate cryptographic workflows in a diverse tech stack.

Responsibilities include designing security controls, driving IAM/Directory Services integration, and overseeing roadmaps for cryptographic projects across cloud and on-prem environments.

Qualifications

• 10 years of experience managing certificate and cryptographic platforms.
• Strong PKI, certificate lifecycle management, and architecture expertise.
• 5+ years Directory Services / DevOps experience with secrets automation.
• Strong PowerShell scripting and automation skills.
• Experience with HSM deployment, management, and troubleshooting.
• Cloud experience with GCP, Azure (Azure Key Vault), or AWS.
• Experience with Infrastructure as Code (IaC), CI/CD pipelines, and API integrations.
• 5+ years working with cross-functional technical and project teams.
• Understanding of incident, problem, request, and change management.
• CyberArk and HashiCorp Vault experience.
• Enterprise secrets management and certificate automation.

Responsibilities

• Lead optimization, integration, and automation of certificate and cryptographic platforms.
• Design and implement security controls, system hardening, monitoring, patching, and risk mitigation.
• Serve as escalation point for Directory Services administrators, resolving complex issues and automating operational tasks.
• Develop engineering roadmaps and manage project priorities, timelines, and deliverables.
• Support technology pilots, POCs, and cross-functional engineering initiatives.

Skills

PKI expertise

Certificate lifecycle management

Automation & scripting

Cross-functional collaboration

Incident & change management

Tools

PowerShell

HSM

CyberArk

HashiCorp Vault

Azure Key Vault

IaC & CI/CD

Job description

Senior PKI / Cryptographic Engineer (W2 only role)

Job Description

We are seeking a Senior PKI / Cryptographic Engineer to manage and enhance enterprise certificate management, cryptographic platforms, secrets management, and automation solutions. This role will focus on PKI architecture, security hardening, infrastructure automation, and supporting Directory Services engineering initiatives.

Key Responsibilities

• Lead optimization, integration, and automation of certificate and cryptographic platforms.
• Design and implement security controls, system hardening, monitoring, patching, and risk mitigation.
• Serve as an escalation point for Directory Services administrators, resolving complex issues and automating operational tasks.
• Develop engineering roadmaps and manage project priorities, timelines, and deliverables.
• Support technology pilots, POCs, and cross-functional engineering initiatives.

Required Skills & Qualifications

• 10 years of experience managing certificate and cryptographic platforms.
• Strong expertise in PKI, certificate lifecycle management, and architecture.
• 5+ years of Directory Services / DevOps engineering experience, including secrets management automation.
• Strong PowerShell scripting and automation skills.
• Experience with HSM deployment, management, and troubleshooting.
• Cloud experience with GCP, Azure (Azure Key Vault), or AWS.
• Experience with Infrastructure as Code (IaC), CI/CD pipelines, and API integrations.
• 5+ years working with cross-functional technical and project teams.
• Understanding of incident, problem, request, and change management.
• CyberArk and HashiCorp Vault.
• Enterprise secrets management and certificate automation.