Senior PKI Engineer: Automation, Crypto & Cloud Security

ACL Digital; Atlanta (GA); On-site; USD 110,000 - 170,000; Full time

Job summary

ACL Digital is seeking a PKI Infrastructure Engineer to ensure availability, resiliency, and lifecycle management of enterprise PKI services across applications in Atlanta.

You will automate certificate issuance, renewal, revocation, and trust store management, and integrate PKI with CI/CD pipelines and cloud services.

The role enforces security standards and supports compliance with NIST and PCI, working with security and operations teams.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, or related field (or equivalent experience).
• 3–7+ years in PKI, cybersecurity engineering, or infrastructure security.
• Hands-on experience with certificate lifecycle management.
• Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM).
• Understanding of TLS/SSL, cryptographic principles, and key management.
• Must be authorized to work in the United States.

Responsibilities

• Ensure availability, resiliency, and patching of PKI infrastructure.
• Support certificate issuance, renewal, revocation, and lifecycle management.
• Build automation for certificate lifecycle management and CI/CD integration.
• Enforce security policies and assist teams with PKI onboarding and compliance.

Skills

PKI

Cybersecurity engineering

Certificate lifecycle management

TLS/SSL knowledge

Cryptography fundamentals

Security policy enforcement

Education

Bachelor’s degree in CS/Cybersecurity or related field

High school diploma / equivalent

Tools

Venafi

DigiCert

Microsoft CA

AWS ACM

HSMs

Job description

ACL Digital is seeking a PKI Infrastructure Engineer to ensure availability, resiliency, and lifecycle management of enterprise PKI services across applications in Atlanta.

You will automate certificate issuance, renewal, revocation, and trust store management, and integrate PKI with CI/CD pipelines and cloud services.

The role enforces security standards and supports compliance with NIST and PCI, working with security and operations teams.