Senior PKI Engineer

Jobtailor; Massachusetts; On-site; USD 120,000 - 170,000; Full time

Job summary

Jobtailor seeks a senior PKI engineer in Massachusetts to design, implement and maintain enterprise certificate lifecycle platforms across on-premises and cloud environments.

You will lead automation for issuance, renewal, deployment, validation and governance workflows and develop integrations with ServiceNow, SailPoint, CyberArk, Splunk, Azure and AWS to strengthen cryptographic security and posture.

Qualifications

• 7+ years of PKI or related enterprise tech experience.
• Deep knowledge of PKI concepts: TLS, SSL, HSMs, OCSP, CRL, SSH, code signing.
• Proficient in scripting with PowerShell or Python and REST APIs.
• Experience with cloud platforms (Azure, AWS).

Responsibilities

• Design and maintain enterprise PKI and certificate lifecycle platforms.
• Lead automation for issuance, renewal, deployment, validation and governance workflows.
• Develop integrations with ServiceNow, SailPoint, CyberArk, Splunk, Azure and AWS.
• Support audit, regulatory, and cybersecurity initiatives related to PKI.

Skills

PKI Management

Certificate Lifecycle

Automation scripting

Cloud platforms experience

Security governance

Tools

Keyfactor

DigiCert

Microsoft ADCS

Venafi

ServiceNow

SailPoint

CyberArk

Splunk

Azure

AWS

Job description

• Design, implement and maintain enterprise PKI and certificate lifecycle management platforms
• Lead automation for certificate issuance, renewal, deployment, validation and governance workflows
• Develop integrations with enterprise platforms such as ServiceNow, SailPoint, CyberArk, Splunk, Azure, AWS and related security technologies
• Support public and private Certificate Authority services, trust models, certificate profiles and lifecycle standards
• Drive machine identity management capabilities across servers, applications, APIs, devices and cloud services
• Lead certificate discovery, remediation, migration and platform modernization initiatives
• Develop automation using APIs, PowerShell, Python and modern orchestration tools
• Partner with infrastructure, cloud, application and security teams to implement cryptographic solutions
• Support crypto agility and post-quantum cryptography readiness initiatives
• Support audit, regulatory and cybersecurity initiatives related to PKI and cryptography.

Requirements

• 7+ years of PKI, cybersecurity, infrastructure engineering or related enterprise technology experience
• Strong knowledge of PKI, TLS, SSL, certificate authorities, HSMs, OCSP, CRL, SSH and code signing concepts
• Experience with Keyfactor, DigiCert, Microsoft ADCS, Venafi or comparable certificate lifecycle management platforms
• Strong scripting and automation experience with PowerShell, Python, REST APIs or similar technologies
• Experience working with cloud platforms such as Azure and AWS
• Strong troubleshooting, communication, documentation and stakeholder management skills.

Core Competencies

Demonstrates extensive experience in designing and maintaining enterprise PKI and certificate lifecycle management platforms, with strong capabilities in automation, integration, and cryptographic solutions across various environments. Proficient in scripting and automation using PowerShell and Python, with a solid understanding of cloud platforms like Azure and AWS.

Highest-signal resume keywords

• PKI Management
• Certificate Lifecycle Management
• Automation with PowerShell
• Cloud Platform Experience
• Cybersecurity Initiatives

ATS Optimization Keywords

Hard Skills

• PKI
• TLS
• SSL
• Certificate Authorities
• HSMs
• OCSP
• CRL
• SSH
• Code Signing
• Scripting

Soft Skills

• Troubleshooting
• Communication
• Documentation
• Stakeholder Management

Industry Keywords

• Certificate Lifecycle Management
• Crypto Agility
• Post-Quantum Cryptography
• Audit Initiatives
• Regulatory Compliance

Tools & Technologies

• Keyfactor
• DigiCert
• Microsoft ADCS
• Venafi
• ServiceNow
• SailPoint
• CyberArk
• Splunk
• Azure
• AWS