Senior PKI Security Engineer

Mindlance; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Mindlance is seeking a Senior PKI Security Engineer to manage and engineer enterprise PKI, digital certificates, and encryption services. The role requires hands-on experience with public CAs, certificate lifecycle management, and improving PKI operations through automation.

You will lead certificate issuance, renewal, revocation, and domain validation, coordinate with DigiCert and Sectigo, and troubleshoot complex PKI incidents.

Qualifications

• 4+ years of IT experience, with at least 2 years in PKI.
• Hands-on experience with public Certificate Authorities DigiCert and Sectigo.
• Strong knowledge of digital certificates and certificate lifecycle management.

Responsibilities

• Manage certificate issuance, renewal, revocation, domain validation, and lifecycle management.
• Work with public Certificate Authorities, particularly DigiCert and Sectigo.
• Troubleshoot PKI, certificate, and encryption incidents.
• Design and improve enterprise PKI solutions.
• Lead change implementations and disaster recovery exercises.
• Automate operational workflows using DevOps principles and collaborate with global teams.

Skills

PKI operations

Certificate lifecycle management

Troubleshooting complex security Incid

DevOps automation

Tools

DigiCert CertCentral

Sectigo

UNIX/Linux

Python scripting

AWS

Job description

We are looking for a Senior PKI Security Engineer to manage, engineer, and support enterprise-level Public Key Infrastructure (PKI), digital certificates, and encryption services. The ideal candidate will have strong hands‑on experience with public Certificate Authorities, certificate lifecycle management, troubleshooting complex security issues, and improving PKI operations through automation.

Key Responsibilities

• Manage certificate issuance, renewal, revocation, domain validation, and lifecycle management.
• Work with public Certificate Authorities, particularly DigiCert and Sectigo.
• Troubleshoot complex PKI, certificate, and encryption-related incidents.
• Design, implement, maintain, and improve enterprise PKI solutions.
• Lead change implementations, disaster recovery exercises, and technical projects.
• Identify root causes, improve service availability, and automate operational workflows using DevOps principles.
• Collaborate with global technical teams, customers, and vendors.

Required Qualifications

• 4+ years of IT experience, including at least 2 years in PKI.
• Hands‑on experience with public Certificate Authorities, specifically DigiCert and Sectigo.
• Strong knowledge of digital certificates, PKI operations, and certificate lifecycle management.

Preferred Qualifications

• Experience with DigiCert CertCentral, UNIX/Linux, Python or scripting, and AWS.
• Knowledge of ITIL principles, enterprise security solutions, and disaster recovery.
• Experience leading technical projects or coordinating engineering teams.

EEO: Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.