Senior PKI Engineer – Automation & Cloud

State Street; Devon (PA); On-site; USD 120,000 - 202,500; Full time

Benefits offered by this job

401K with company match

Comprehensive insurance coverage

Paid time off including vacation and/​

Job summary

State Street is seeking a Senior PKI Engineer to advance enterprise PKI, certificate lifecycle management, and machine identity across on-premises, hybrid, and cloud environments. You will design scalable, automated cryptographic services, collaborating with infrastructure, cloud, security, and governance teams to reduce manual work and increase resiliency.

You will lead automation for issuance, renewal, and governance, integrate with platforms like ServiceNow, Azure and AWS, and drive platform

Qualifications

• 7+ years of PKI, cybersecurity, infrastructure engineering or related enterprise technology experience.
• Strong knowledge of PKI, TLS, SSL, certificate authorities, HSMs, OCSP, CRL, SSH and code signing concepts.
• Experience with Keyfactor, DigiCert, Microsoft ADCS, Venafi or comparable certificate lifecycle management platforms.
• Strong scripting and automation experience with PowerShell, Python, REST APIs or similar technologies.
• Experience working with cloud platforms such as Azure and AWS.
• Strong troubleshooting, communication, documentation and stakeholder management skills.

Responsibilities

• Design, implement and maintain enterprise PKI and certificate lifecycle management platforms.
• Lead automation for certificate issuance, renewal, deployment, validation and governance workflows.
• Develop integrations with enterprise platforms such as ServiceNow, SailPoint, CyberArk, Splunk, Azure, AWS and related security technologies.
• Support public and private Certificate Authority services, trust models, certificate profiles and lifecycle standards.
• Drive machine identity management capabilities across servers, applications, APIs, devices and cloud services.
• Lead certificate discovery, remediation, migration and platform modernization initiatives.
• Develop automation using APIs, PowerShell, Python and modern orchestration tools.
• Partner with infrastructure, cloud, application and security teams to implement cryptographic solutions.
• Support crypto agility and post-quantum cryptography readiness initiatives.
• Support audit, regulatory and cybersecurity initiatives related to PKI and cryptography.

Skills

PKI architecture

TLS/SSL concepts

Certificate authorities

Automation

Scripting: PowerShell/Python

Cloud platforms (Azure/AWS)

Security governance

Tools

Keyfactor

DigiCert

Microsoft ADCS

Venafi

Job description

State Street is seeking a Senior PKI Engineer to advance enterprise PKI, certificate lifecycle management, and machine identity across on-premises, hybrid, and cloud environments. You will design scalable, automated cryptographic services, collaborating with infrastructure, cloud, security, and governance teams to reduce manual work and increase resiliency.

You will lead automation for issuance, renewal, and governance, integrate with platforms like ServiceNow, Azure and AWS, and drive platform