Senior PKI Security Engineer

Spectraforce Technologies; McLean (VA); Remote; USD 120,000 - 160,000; Full time

Job summary

Spectraforce Technologies, Inc. is seeking a Senior PKI Security Engineer for a remote, 5-month engagement. The role focuses on operating, engineering, and supporting an enterprise PKI environment, with expert-level PKI, certificates, and encryption workload.

The candidate will lead initiatives in a distributed team and drive security improvements. The ideal candidate has 4+ years IT experience including PKI, and hands-on experience with public CAs (Digicert, Sectigo).

Qualifications

• 4+ years of IT experience
• 2+ years PKI experience
• Experience with public Certificate Authorities (Digicert, Sectigo)
• Knowledge of PKI, certificates, and encryption operations
• Experience leading technical teams or projects (preferred)
• AWS Certification (preferred)
• Python or scripting experience (preferred)
• 2+ years UNIX experience (preferred)
• Experience with large-scale, enterprise PKI environments (preferred)

Responsibilities

• Manage issuance and lifecycle of internal CA certificates.
• Register and manage domains and validation processes.
• Troubleshoot complex technical issues and answer customer questions.
• Monitor PKI incidents and resolve issues across levels.
• Change management for PKI and certificate environment.
• Lead PKI projects and coordinate with teams globally.

Skills

PKI Expertise

Python scripting

DevOps concepts

UNIX

Education

Bachelor's degree in CS/IS/Engineering

High School Diploma or equivalent

Tools

Digicert CertCentral

AWS

UNIX

Job description

Role: Senior PKI Security Engineer

Duration: 5 Months

Location: Remote

Job Description:

Client is looking for a Senior PKI Security Engineer within the Cyber organization who will be responsible for providing operational, engineering, and project support for an enterprise PKI environment. The Senior PKI Security Engineer is considered the expert in the operations of PKI, Certificates, and Encryption and should have expert-level experience supporting large-scale and highly complex environments. This role will also require the ability to lead and coordinate efforts among the team. Individuals must be self-motivated and able to work well in a geographically dispersed, virtual team environment.

Primary Responsibilities:

Operations & Support

• Manage the internal process for the issuance and lifecycle management of public Certificate Authority (CA) certificates.
• Register and manage domains and associated validation processes.
• Assist with troubleshooting, resolving complex or high-severity technical issues, and directly addressing customer questions.
• Monitor the PKI and Certificate incident queue and resolve all levels of issues.
• Create, review, approve, and implement changes to the PKI and Certificate environment.
• Act as the PKI and Certificate lead for periodic disaster recovery exercises.

Engineering & Strategy

• Analysis, design, and implementation of Public Key Infrastructure (PKI), certificate, and security solutions.
• Analyze the current PKI and Certificate environment to identify both technical and operational challenges and develop solutions for improvement.
• Analyze data and identify trends to facilitate root cause analysis and identify opportunities for service improvement.
• Participate in capacity planning, performance monitoring, and maintenance to ensure high availability and proactively identify opportunities for service improvement.
• Apply a strong understanding of DevOps principles to daily workflows and automation efforts.

Leadership & Collaboration

• Act as a project lead or participate as a team member on projects involving PKI, certificates, and security.
• Translate business needs into workable technology solutions that meet the needs of internal customers.
• Represent the Crypto Services team on global incident management calls, interacting with other technical teams, customers, or vendors.
• Effectively communicate technical issues and challenges to both technical and non-technical audiences.

Basic Qualifications:

• High School Diploma, GED, or equivalent certification
• At least 4 years of Information Technology experience
• At least 2 years of experience with Public Key Infrastructure (PKI)
• Experience working with public Certificate Authorities, specifically Digicert and Sectigo

Preferred Qualifications:

• Bachelor's degree in Computer Science, Information Systems, or Engineering
• Knowledge of or hands-on experience with Digicert CertCentral
• Understanding of the Information Technology Infrastructure Library (ITIL) principles
• Experience leading technical teams or leading projects
• AWS Certification
• Experience in Python or other programming or scripting languages
• 3+ years of PKI Experience
• Experience in PKI certificate and security technical experience that includes the operational support and implementation of large-scale, enterprise-level solutions
• 2+ years UNIX experience