Senior PKI & Cryptography Engineer – On-Site

Charles Schwab; Southlake (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k) with company match

Paid time off and sabbatical after 5+

Tuition reimbursement

Health, dental, and vision insurance

Employee stock purchase plan

Job summary

Charles Schwab in Southlake, Texas is seeking a Senior PKI Security Engineer to modernize the Public Key Infrastructure, strengthening certificate provisioning, renewal, monitoring, and trust across the enterprise. The role requires hands-on PKI, cryptography, and security engineering experience, plus scripting for automation and API integrations.

You will partner with architecture, infrastructure, cloud, DevOps, application, and security teams to implement scalable PKI patterns.

Qualifications

• 6+ years in security/PKI/cryptography roles.
• Hands-on PKI, CA, TLS/SSL, lifecycle management experience.
• Automation scripting in Python/PowerShell/Java/Bash.

Responsibilities

• Modernize Schwab's PKI platform and strengthen certificate provisioning.
• Improve renewal, monitoring, and protection of certificates across the enterprise.
• Build automation, integrations, monitoring, and operational controls.
• Collaborate across architecture, infrastructure, cloud, DevOps, application and security teams.
• Support rotating on-call schedule in a 24x7 environment.

Skills

PKI engineering

Cryptography

Certificate lifecycle management

Scripting & automation

API integrations

Technical troubleshooting

Communication & collaboration

Linux & Windows Server

On-call rotation

Tools

Venafi

DigiCert

Active Directory Certificate Services

Trust Protection Platform

Job description

Charles Schwab in Southlake, Texas is seeking a Senior PKI Security Engineer to modernize the Public Key Infrastructure, strengthening certificate provisioning, renewal, monitoring, and trust across the enterprise. The role requires hands-on PKI, cryptography, and security engineering experience, plus scripting for automation and API integrations.

You will partner with architecture, infrastructure, cloud, DevOps, application, and security teams to implement scalable PKI patterns.