Senior PKI Engineer

Beacon Hill; Indianapolis (IN); On-site; USD 140,000 - 190,000; Full time

Job summary

Beacon Hill Technologies is seeking a Senior PKI Engineer / PKI Architect to lead the implementation and rollout of an enterprise certificate lifecycle management platform.

This consultant will partner with infrastructure, security, and architecture teams to evaluate, design, deploy, and operationalize a large-scale certificate management solution capable of supporting hundreds of thousands of certificates across a complex healthcare enterprise environment.

Qualifications

• 7+ years of Infrastructure, Security Engineering, or PKI experience.
• Deep understanding of Public Key Infrastructure (PKI).
• Hands-on experience with X.509 certificates.
• Experience implementing or administering enterprise certificate management platforms.
• Understanding of certificate issuance, renewal, revocation, and automation processes.
• Experience designing and deploying solutions within large enterprise environments.

Responsibilities

• Lead the implementation and rollout of an enterprise certificate lifecycle management platform.
• Partner with infrastructure, security, and architecture teams to evaluate, design, deploy and operationalize the solution.
• Drive discovery, architecture, and implementation efforts for a large-scale PKI program.

Skills

PKI experience

X.509 certificates

Infrastructure security

Stakeholder management

Communication skills

Tools

Keyfactor

Venafi

ADCS

Job description

Beacon Hill Technologies is seeking a Senior PKI Engineer / PKI Architect to lead the implementation and rollout of an enterprise certificate lifecycle management platform. This consultant will partner with infrastructure, security, and architecture teams to evaluate, design, deploy, and operationalize a large-scale certificate management solution capable of supporting hundreds of thousands of certificates across a complex healthcare enterprise environment. The project is highly visible and strategically important due to upcoming certificate lifecycle and compliance requirements.

Required Skills

• 7+ years of Infrastructure, Security Engineering, or PKI experience.
• Deep understanding of Public Key Infrastructure (PKI).
• Hands-on experience with X.509 certificates.
• Experience implementing or administering enterprise certificate management platforms.
• Understanding of certificate issuance, renewal, revocation, and automation processes.
• Experience designing and deploying solutions within large enterprise environments.
• Ability to lead discovery, architecture, and implementation efforts.
• Strong documentation and technical process development skills.
• Experience working cross-functionally with infrastructure, security, and application teams.
• Excellent communication and stakeholder management skills.

Knowledge of

• TLS/SSL
• Encryption
• Digital identity
• Certificate Authorities
• Authentication and trust models

Desired Skills

• Keyfactor implementation and administration experience.
• Venafi implementation and administration experience.
• Microsoft Active Directory Certificate Services (ADCS).
• Enterprise security architecture experience.
• PKI modernization or migration project experience.
• Experience supporting large-scale server and application environments.
• PowerShell scripting and automation.
• Experience developing operational runbooks and deployment procedures.
• Cloud security or cloud certificate management experience.
• Healthcare industry experience.
• Experience working in regulated environments including:
• HIPAA
• PCI
• NIST
• HITRUST
• Relevant certifications such as:
• CISSP
• Security+
• GSEC
• Security Architecture Certifications
• Microsoft Security Certifications

Beacon Hill Technologies is seeking a Senior PKI Engineer / PKI Architect to lead the implementation and rollout of an enterprise certificate lifecycle management platform. This consultant will partner with infrastructure, security, and architecture teams to evaluate, design, deploy, and operationalize a large-scale certificate management solution capable of supporting hundreds of thousands of certificates across a complex healthcare enterprise environment. The project is highly visible and strategically important due to upcoming certificate lifecycle and compliance requirements.

Required Skills

• 7+ years of Infrastructure, Security Engineering, or PKI experience.
• Deep understanding of Public Key Infrastructure (PKI).
• Experience managing enterprise certificate lifecycle programs.
• Hands-on experience with X.509 certificates.
• Experience implementing or administering enterprise certificate management platforms.
• Understanding of certificate issuance, renewal, revocation, and automation processes.
• Experience designing and deploying solutions within large enterprise environments.
• Ability to lead discovery, architecture, and implementation efforts.
• Strong documentation and technical process development skills.
• Experience working cross-functionally with infrastructure, security, and application teams.
• Excellent communication and stakeholder management skills.

Knowledge of

• TLS/SSL
• Encryption
• Digital identity
• Certificate Authorities
• Authentication and trust models

Desired Skills

• Keyfactor implementation and administration experience.
• Venafi implementation and administration experience.
• Microsoft Active Directory Certificate Services (ADCS).
• Enterprise security architecture experience.
• PKI modernization or migration project experience.
• Experience supporting large-scale server and application environments.
• PowerShell scripting and automation.
• API integration experience.
• Experience developing operational runbooks and deployment procedures.
• Cloud security or cloud certificate management experience.
• Healthcare industry experience.
• Experience working in regulated environments including:
• HIPAA
• PCI
• NIST
• HITRUST
• Relevant certifications such as:
• CISSP
• Security+
• GSEC
• Security Architecture Certifications
• Microsoft Security Certifications

Desired Skills and Experience

• 7+ years of Infrastructure, Security Engineering, or PKI experience.
• Deep understanding of Public Key Infrastructure (PKI).
• Experience managing enterprise certificate lifecycle programs.
• Hands-on experience with X.509 certificates.

Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply.

California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Benefits Information

Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings.

We look forward to working with you.

Beacon Hill. Employing the Future