Senior PKI Security Engineer

ACL Digital; Atlanta (GA); On-site; USD 120,000 - 190,000; Full time

Job summary

ACL Digital is seeking an experienced PKI Engineer to design, operate, and automate certificate lifecycles across enterprise applications and infrastructure.

The role emphasizes security policy enforcement, collaboration with cross-functional teams, and readiness for emerging cryptographic standards. 3–7+ years of PKI experience is expected, along with hands-on management of certificate environments.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, or related field (or equivalent experience).
• 3–7+ years in PKI, cybersecurity engineering, or infrastructure security.
• Hands-on experience with certificate lifecycle management.
• Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM).
• Understanding of TLS/SSL, cryptographic principles, and key management.
• Prioritizes safety and security of self, others, and personal data.
• Embraces diverse people, thinking, and styles.
• Has authorization to work in the United States.

Responsibilities

• PKI Infrastructure & Operations: Ensure availability, resiliency, and patching of PKI infrastructure.
• Certificate Lifecycle Management: Manage large-scale certificate environments across applications and infrastructure; ensure timely renewal and replacement.
• Automation & Integration: Build and implement automation for certificate lifecycle management; integrate PKI services with enterprise platforms.
• Governance, Standards & Policy Enforcement: Enforce security policies; maintain issuance and usage standards; support regulatory compliance; enable automation; provide guidance and tooling.
• Emerging Crypto & Future Readiness: Support adoption of new cryptographic standards; modernization of PKI architecture and tooling; evaluate scalable solutions.

Skills

Certificate lifecycle management

TLS/SSL knowledge

Cryptography basics

Security best practices

Diversity and inclusion awareness

Education

Bachelor’s degree in CS/Cybersecurity or related field

High school diploma or equivalent

Tools

Venafi

DigiCert

Microsoft CA

AWS ACM

Job description

WHAT YOU NEED TO SUCCEED (MINIMUM QUALIFICATIONS)

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
• 3–7+ years in PKI, cybersecurity engineering, or infrastructure security
• Hands-on experience with certificate lifecycle management
• Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM)
• Understanding of TLS/SSL, cryptographic principles, and key management
• Consistently prioritizes safety and security of self, others, and personal data.
• Embraces diverse people, thinking, and styles.
• Possesses a high school diploma, GED, or high school equivalency.
• Is at least 18 years of age and has authorization to work in the United States.

WHAT WILL GIVE YOU A COMPETITIVE EDGE (PREFERRED QUALIFICATIONS)

Experience with:

• HSMs and key custody operations
• Cloud certificate services (AWS, Azure)
• Knowledge of compliance frameworks (NIST, PCI-DSS, CMMC)
• Experience scaling PKI in large enterprise environments
• Familiarity with trust store management across distributed systems

YOUR RESPONSIBILITIES IN THIS ROLE:

1. PKI Infrastructure & Operations

• Ensure availability, resiliency, and patching of PKI infrastructure
• Support certificate issuance, renewal, revocation, and lifecycle management

2. Certificate Lifecycle Management

• Manage large-scale certificate environments across applications and infrastructure
• Ensure timely renewal and replacement of certificates
• Support trust store management and certificate chain integrity

3. Automation & Integration

• Build and implement automation for certificate lifecycle management
• Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications)
• Deploy and operationalize tools such as connectors and automation pipelines

4. Governance, Standards & Policy Enforcement

• Enforce security policies related to certificate usage and cryptography
• Define and maintain standards for certificate issuance, validity, and usage
• Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives)
• Partner with application and infrastructure teams to enable certificate automation
• Provide guidance and supporting tooling while ensuring clear ownership boundaries
• Assist teams with onboarding to PKI services and automation
• Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures
• Support incident response involving certificate or encryption issues
• Improve visibility and reporting for certificate health and compliance

7. Emerging Crypto & Future Readiness

• Support adoption of new cryptographic standards (e.g., post-quantum cryptography)
• Assist in modernization of PKI architecture and tooling
• Evaluate new solutions for scalability and resilience