Senior PKI Security Engineer

Delan Associates, Inc; Atlanta (GA); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Delan Associates, Inc. is seeking a Senior PKI Security Engineer in Atlanta, GA with a hybrid work model.

The candidate must have 13+ years of experience in cyber security focusing on PKI, CA management, and certificate lifecycle. Key responsibilities include PKI design, implementation, and administration across Windows and Linux, with strong emphasis on automation in AWS PKI services and Venafi integration.

Qualifications

• 13+ years of experience in PKI/security engineering required.
• 11+ years of hands-on PKI design, implementation, and administration.
• Experience with cloud PKI and automation is essential.
• Proven ability to manage certificate life-cycle and CA operations.
• Strong knowledge of IAM, encryption, and renewal automation.

Skills

Cyber Security

PKI

AWS PKI

PKI Architecture

CA Management

Cert Lifecycle

Renewal Automation

Venafi

Windows Admin

Linux Admin

SSL/TLS

IAM

FPKI

Red Hat

Cloud Security

Monitoring & Compliance

Contingency Planning

Agile Methodology

PowerShell

Python

HSM Design

Mainframe Encryption

Identity & Access Management

Tools

AWS PKI Services

Red Hat Certificate System

IBM Mainframe Encryption

Job description

Senior PKI Security Engineer

Atlanta, GA (Hybrid)

GA Locals Preferred, Relocation is OK

13+ Years must

Must-Needed Skills

• * Cyber Security
• * Public Key Infrastructure (PKI)
• * AWS PKI Services – KMS, CloudHSM, ACM, CloudFront, Secrets Manager, CloudTrail
• * AWS DevOps & Automation
• * PKI Architecture, Design, Implementation & Administration
• * Certificate Authority (CA) Management
• * Digital Certificate Lifecycle Management
• * Certificate Renewal Automation
• * Venafi Integration & Certificate Management
• * Microsoft PKI Technologies
• * Windows & Linux Server Administration
• * SSL/TLS, HTTPS, LDAPs
• * Scripting: PowerShell, Python, Batch, JSON, YAML
• * HSM (Hardware Security Module) Design & Implementation
• * IBM Mainframe Encryption (TKE, UKO, SGKLM)
• * Identity & Access Management (IAM)
• * Authentication, Authorization & Certificate Governance
• * Federal PKI (FPKI) / Common Policy Authority Compliance
• * Red Hat Certificate System
• * Cloud Security Strategy & Engineering
• * Security Monitoring & Compliance
• * IT Contingency Planning
• * Agile Methodology

Preferred Certifications

• * CISSP
• * CISM
• * AWS Certified Solutions Architect / Security Specialty / Developer / SysOps