Senior PKI & Encryption Infrastructure Engineer

Brooksource; Bloomfield (CT); On-site; USD 120,000 - 150,000; Full time

Job summary

A leading tech consultancy is seeking a skilled Sr. PKI Engineer to oversee the management and maintenance of a global PKI infrastructure in a regulated environment. The ideal candidate should have extensive experience in infrastructure security and certificate authority management, along with expertise in tools like Venafi and Active Directory Certificate Services. This role includes responsibilities for automating certificate processes and ensuring compliance with cryptographic standards.

Qualifications

• 8-10+ years’ experience in infrastructure security with deep expertise in PKI and certificate authority management.
• Ability to operate in a regulated enterprise environment with high availability and compliance requirements.

Responsibilities

• Manage and maintain PKI infrastructure including certificate authorities and hardware security modules.
• Oversee certificate lifecycle operations—issuance, renewal, revocation, and automation of enterprise certificates.
• Support and maintain Active Directory Certificate Services and related Microsoft PKI components.

Skills

Infrastructure security expertise

Venafi, DigiCert, or Entrust/Centigo experience

HSMs (Hardware Security Modules)

Microsoft Active Directory Certificate Services

Scripting languages (PowerShell, Python)

TLS/SSL and encryption standards understanding

Job description

A leading tech consultancy is seeking a skilled Sr. PKI Engineer to oversee the management and maintenance of a global PKI infrastructure in a regulated environment. The ideal candidate should have extensive experience in infrastructure security and certificate authority management, along with expertise in tools like Venafi and Active Directory Certificate Services. This role includes responsibilities for automating certificate processes and ensuring compliance with cryptographic standards.