Senior PKI Engineer — Enterprise PKI & Automation

Charles Schwab; Phoenix (AZ); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

401(k) with company match

Sabbatical after 5 years

Parental leave and family benefits

Tuition reimbursement

Health, dental, and vision insurance

Job summary

Schwab is seeking a senior Security Engineer to design, implement, and maintain enterprise PKI services across on‑prem, SaaS, and cloud environments. You will manage CAs, RAs, HSMs, and certificate lifecycles while driving automation to scale operations.

Ideal candidates bring 5+ years in PKI with strong scripting, automation, and governance capabilities, and thrive in a fast‑paced, collaborative security culture. This role requires onsite work in Phoenix, AZ.

Qualifications

• 5+ years in PKI, certificate management, or cybersecurity controls.
• Strong PKI principles: lifecycle, trust chains, validation, revocation.

Responsibilities

• Architect, deploy, and maintain enterprise PKI infrastructure including CAs, RAs, HSMs, and certificate services.
• Automate issuance, renewal, revocation, and lifecycle processes for certificates across users, servers, apps, services, devices.
• Develop automation to improve PKI reliability and scale lifecycle management.
• Apply PKI/trust concepts in system design, authentication flows, and access control.
• Integrate PKI with security systems, apps, and enterprise platforms; partner across teams.
• Identify trust failures, lifecycle risks, automation issues, and outages; drive remediation.
• Conduct security assessments of PKI systems to find vulnerabilities and opportunities for improvement.
• Lead complex security initiatives from design to delivery with cross-functional teams.
• Collaborate with Data Protection, Cybersecurity, and engineering to align PKI with business needs.

Skills

PKI

Certificate lifecycle

Automation

Scripting

AD CS

Venafi

PowerShell

Python

GitHub

.NET

HSMs

Education

Bachelor's degree

Tools

AD CS

Venafi

PowerShell

Python

GitHub

.NET

Job description

Schwab is seeking a senior Security Engineer to design, implement, and maintain enterprise PKI services across on‑prem, SaaS, and cloud environments. You will manage CAs, RAs, HSMs, and certificate lifecycles while driving automation to scale operations.

Ideal candidates bring 5+ years in PKI with strong scripting, automation, and governance capabilities, and thrive in a fast‑paced, collaborative security culture. This role requires onsite work in Phoenix, AZ.