Senior PKI Engineer: Automate Certificates & Machine Identities

State Street; Clifton (NJ); On-site; USD 120,000 - 202,500; Full time

Benefits offered by this job

401K with company match

Insurance coverage including basiclife

Medical, dental, vision, long-term dis

Paid time off

Employee Assistance Program

Incentive compensation

Job summary

State Street is seeking a Senior PKI Engineer to design, modernize, and automate enterprise PKI, certificate lifecycle management, and machine identity across on‑premises, hybrid, and cloud environments.

You will drive automation for issuance, renewal, deployment and governance while integrating with platforms like ServiceNow, SailPoint, CyberArk, Splunk, Azure and AWS. Strong scripting and cross‑team collaboration are essential.

Qualifications

• 7+ years of PKI, cybersecurity, infrastructure engineering or related enterprise technology experience.
• Strong knowledge of PKI, TLS, SSL, certificate authorities, HSMs, OCSP, CRL, SSH and code signing concepts.
• Experience with Keyfactor, DigiCert, Microsoft ADCS, Venafi or comparable certificate lifecycle management platforms.
• Strong scripting and automation experience with PowerShell, Python, REST APIs or similar technologies.
• Experience working with cloud platforms such as Azure and AWS.
• Strong troubleshooting, communication, documentation and stakeholder management skills.

Responsibilities

• Design, implement and maintain enterprise PKI and certificate lifecycle management platforms.
• Lead automation for certificate issuance, renewal, deployment, validation and governance workflows.
• Develop integrations with enterprise platforms such as ServiceNow, SailPoint, CyberArk, Splunk, Azure, AWS and related security technologies.
• Support public and private Certificate Authority services, trust models, certificate profiles and lifecycle standards.
• Drive machine identity management capabilities across servers, applications, APIs, devices and cloud services.
• Lead certificate discovery, remediation, migration and platform modernization initiatives.
• Develop automation using APIs, PowerShell, Python and modern orchestration tools.
• Partner with infrastructure, cloud, application and security teams to implement cryptographic solutions.
• Support crypto agility and post-quantum cryptography readiness initiatives.
• Support audit, regulatory and cybersecurity initiatives related to PKI and cryptography.

Skills

PKI

TLS/SSL

Certificate authorities

HSMs

OCSP/CRL

SSH

Code signing

PowerShell

Python

REST APIs

Azure

AWS

Tools

Keyfactor

DigiCert

Microsoft ADCS

Venafi

Job description

State Street is seeking a Senior PKI Engineer to design, modernize, and automate enterprise PKI, certificate lifecycle management, and machine identity across on‑premises, hybrid, and cloud environments.

You will drive automation for issuance, renewal, deployment and governance while integrating with platforms like ServiceNow, SailPoint, CyberArk, Splunk, Azure and AWS. Strong scripting and cross‑team collaboration are essential.