Senior PKI Engineer: Cloud-Driven Certificate Automation

Releady; United States; Hybrid; USD 103,000 - 110,000; Full time

Job summary

Releady is seeking a Senior PKI Engineer to design, operate, and scale certificate services across cloud and on-prem environments. You will lead PKI architecture, lifecycle management, and automation, partnering with security and platform teams to secure identity across services.

The role emphasizes scalable certificate operations, cloud integrations (AWS/Azure), and IaC-driven infrastructure. Hybrid or remote work is allowed for residents in select states, with a 12-month contract and a pay

Qualifications

• 7+ years of PKI, certificate services, or security infra engineering.
• Expert knowledge of CA architecture, certificate profiles, and X.509 lifecycle.
• Hands-on production PKI operations, TLS issues, and trust chain troubleshooting.
• Experience with AWS or Azure and cloud-integrated certificate services.
• Automation proficiency in Python/PowerShell/Go; IaC with Terraform, Bicep, or CloudFormation.
• Familiar with ACME, SCEP, or EST enrollment and automation.

Responsibilities

• Design and operate CA, RA, and HSM integrations.
• Establish key protection, access controls, and audit practices.
• Own certificate enrollment, issuance, renewal, and revocation workflows.
• Build automation to reduce manual PKI work and prevent outages.
• Integrate PKI with applications and cloud services (AWS/Azure).
• Define IaC for PKI services and supporting cloud infra.
• Collaborate with security, platform, and application teams on identity workflows.
• Explore AI to improve operations with proper security controls.

Skills

PKI expertise

Automation

Cloud (AWS/Azure)

Scripting (Python/PowerShell/Go)

IaC (Terraform/Bicep/CloudFormation)

Certificate lifecycle management

Tools

Terraform

Bicep

CloudFormation

ACME/SCEP/EST protocols

Job description

Releady is seeking a Senior PKI Engineer to design, operate, and scale certificate services across cloud and on-prem environments. You will lead PKI architecture, lifecycle management, and automation, partnering with security and platform teams to secure identity across services.

The role emphasizes scalable certificate operations, cloud integrations (AWS/Azure), and IaC-driven infrastructure. Hybrid or remote work is allowed for residents in select states, with a 12-month contract and a pay