Senior PKI/Cryptography System Engineer

Agile Resources, Inc.; United States; Remote; USD 114,000 - 162,000; Part time

Benefits offered by this job

Medical, dental, vision

STD/LTD, HSA/FSA

Term life insurance

Supplemental health insurance options

Job summary

Agile Resources, Inc. is seeking a senior Systems Engineer to build, operate, and enhance enterprise cryptographic platforms for scalable identity, certificates, keys, and secrets. You will own delivery from roadmap planning through implementation and provide deep escalation support.

You will design PKI architectures, manage HSMs, and automate secrets workflows using PowerShell, while driving continuous improvement via infrastructure-as-code and CI/CD. Remote within the continental U.S.

Qualifications

• 7–10 years managing enterprise certificate and cryptographic platforms, including PKI architecture and lifecycle governance.
• Hands-on experience deploying and managing HSM platforms with security controls.
• 5+ years engineering Directory Services/DevOps with automated secrets management and PowerShell proficiency.
• Cloud-based certificate/secret integrations on Azure/AWS/GCP, IaC, and CI/CD for infrastructure delivery.
• Ownership of engineering roadmaps, milestones, and POCs/pilots for enterprise platforms.
• Strong collaboration with IT, security, and operations teams; experience with incident/change management.

Responsibilities

• Own end-to-end engineering and operational health of enterprise cryptographic platforms.
• Design and deliver improvements to certificate services based on telemetry and trends.
• Deploy, manage, and troubleshoot HSM platforms with policy alignment and readiness checks.
• Implement cryptographic risk mitigation, baselines, monitoring, and audit-ready procedures.
• Engineer and automate secrets-management workflows across Directory Services and DevOps.
• Build PowerShell automation for admin workflows, integrations, reporting, and break/fix procedures.
• Provide senior escalation support for incidents and outages; drive RCA and corrective actions.
• Deliver cloud-based integrations for certificates/keys/secrets on major cloud platforms.
• Develop IaC and CI/CD pipelines for repeatable, auditable deployments.
• Drive roadmaps, milestones, and pilots; coordinate with stakeholders on changes and delivery.

Skills

PKI architecture

HSM management

PowerShell scripting

Cloud platforms (Azure/AWS/GCP)

CI/CD pipelines

Roadmap ownership

IT service management

Directory Services/DevOps

Secrets management

Enterprise certificate management

Tools

Keyfactor

CyberArk

HashiCorp Vault

Azure Key Vault

Job description

Location/Remote:

Remote (must live within the continental U.S.).

Employment Type:

6-month Contract (W-2); ability to extend for multiple years.

Compensation:

Up to $100/hour W-2 (commensurate with experience)

Benefits:

Medical, dental, vision, short-term and long-term disability (STD/LTD), HSA/FSA, term life insurance, and supplemental health insurance options (e.g., Aflac) for eligible employees and their families.

This senior Systems Engineer role is responsible for building, operating, and improving enterprise cryptographic platforms that enable secure identity, certificates, keys, and secrets at scale. Success is defined by reliable PKI and HSM operations, well-governed certificate lifecycle management, and automation that reduces operational risk and manual effort. You will own technical delivery from roadmap planning through implementation, while providing deep escalation support and driving measurable service hardening.

Responsibilities:

• Own the end-to-end engineering and operational health of enterprise certificate and cryptographic platforms, including PKI architecture, certificate issuance patterns, renewal strategies, and lifecycle governance
• Design and deliver improvements to certificate services, including performance tuning, reliability enhancements, and platform optimization based on operational telemetry and service trends
• Deploy, manage, and troubleshoot HSM platforms, including configuration, firmware/software lifecycle coordination, cryptographic policy alignment, and operational readiness checks
• Implement cryptographic risk mitigation controls, including platform hardening, secure configuration baselines, monitoring/alerting, access controls, and audit-ready operational procedures
• Engineer and automate secrets-management workflows across Directory Services and DevOps environments, reducing manual handling of sensitive material and improving traceability
• Build and maintain PowerShell automation for administrative workflows, platform integrations, reporting, and repeatable break/fix procedures
• Provide senior-level escalation support for complex incidents and outages, driving structured triage, root-cause analysis, and corrective actions through closure
• Deliver cloud-based integrations for certificates, keys, and secrets on at least one major cloud platform, ensuring secure connectivity patterns and operational supportability
• Develop and maintain infrastructure-as-code and CI/CD pipelines to deliver repeatable, tested, and auditable infrastructure and service changes
• Drive engineering roadmaps, prioritization, milestones, and technical improvement initiatives, including planning and executing approved proofs of concept and pilots
• Partner with engineering, security, operations, and project stakeholders to execute incident, request, problem, and change processes with clear status, risks, and deliverables

Required Skills:

• 7–10 years managing enterprise certificate and cryptographic platforms, including PKI/certificate architecture, deployment, lifecycle management, optimization, and technical ownership
• Hands-on experience deploying, administering, and troubleshooting HSM platforms, including cryptographic risk mitigation, hardening, monitoring, and operational controls
• 5+ years engineering Directory Services/DevOps environments and building automated secrets-management workflows, including strong PowerShell skills and complex admin escalation support
• Infrastructure engineering experience on Azure, AWS, or GCP, implementing cloud-based certificate/key/secrets integrations for cryptographic services
• Experience delivering infrastructure-as-code and building/supporting CI/CD pipelines that automate reliable infrastructure and service delivery
• Demonstrated ownership of engineering roadmaps, prioritization, implementation milestones, technical improvement work, and delivery of approved POCs/pilots for enterprise platforms
• 5+ years collaborating with technical and project teams to deliver IT solutions, including clear communication with business/PM/operations stakeholders and working knowledge of incident, request, problem, and change management

Preferred Skills:

• Experience with certificate and secrets platforms and integrations, including Keyfactor certificate platforms, CyberArk and/or HashiCorp Vault, Azure Key Vault specialization, and building application-to-application API integrations