Senior PKI Security Engineer

Sapear Inc; Washington (District of Columbia); Remote; USD 150,000 - 190,000; Full time

Job summary

Capital One is seeking a Senior PKI Security Engineer to join the Cyber organization. The role focuses on operational support, engineering, and project delivery for an enterprise PKI environment. You will lead PKI, certificates, and encryption efforts while coordinating across a dispersed team.

Qualified candidates will have 4+ years IT experience, 2+ years PKI, and experience with Digicert and Sectigo. Strong leadership and DevOps alignment are valued.

Qualifications

• At least 4 years of IT experience.
• At least 2 years of PKI experience.
• Experience with public CAs, specifically Digicert and Sectigo.
• Knowledge of ITIL principles is preferred.

Responsibilities

• Manage issuance and lifecycle of public CA certificates.
• Register and manage domains and validation processes.
• Troubleshoot and resolve complex technical issues.
• Monitor PKI and certificate incident queue; resolve issues.
• Implement changes to PKI and Certificate environment.
• Lead PKI and Certificate activities in disaster recovery exercises.
• Lead or participate in PKI, certificates, and security projects.
• Translate business needs into workable technology solutions.

Skills

PKI experience

UNIX experience

DevOps practices

Team leadership

Education

High School Diploma

Bachelor's degree in Computer Science/Information Systems/Engineering

Tools

Digicert CertCentral

Sectigo CA

Job description

Hi,

Role: Senior PKI Security Engineer

Location: Remote Someone must live in EST or CST time zone

Basic Qualifications

• High School Diploma, GED, or equivalent certification
• At least 4 years of Information Technology experience
• At least 2 years of experience with Public Key Infrastructure (PKI)
• Experience working with public Certificate Authorities, specifically Digicert and Sectigo

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Systems, or Engineering
• Knowledge of or hands-on experience with Digicert CertCentral
• Understanding of the Information Technology Infrastructure Library (ITIL) principles
• Experience leading technical teams or leading projects
• AWS Certification

Experience In Python Or Other Programming Or Scripting Languages

• 3+ years of PKI Experience
• Experience in PKI certificate and security technical experience that includes the operational support and implementation of large-scale, enterprise-level solutions
• 2+ years UNIX experience

Capital One is looking for a Senior PKI Security Engineer within the Cyber organization who will be responsible for providing operational, engineering, and project support for an enterprise PKI environment. The Senior PKI Security Engineer is considered the expert in the operations of PKI, Certificates, and Encryption and should have expert-level experience supporting large-scale and highly complex environments. This role will also require the ability to lead and coordinate efforts among the team. Individuals must be self-motivated and able to work well in a geographically dispersed, virtual team environment.

Primary Responsibilities

Operations & Support

• Manage the internal process for the issuance and lifecycle management of public Certificate Authority (CA) certificates.
• Register and manage domains and associated validation processes.
• Assist with troubleshooting, resolving complex or high-severity technical issues, and directly addressing customer questions.
• Monitor the PKI and certificate incident queue and resolve all levels of issues.
• Create, review, approve, and implement changes to the PKI and Certificate environment.
• Act as the PKI and Certificate lead for periodic disaster recovery exercises.

Engineering & Strategy

• Analysis, design, and implementation of Public Key Infrastructure (PKI), certificate, and security solutions.
• Analyze the current PKI and Certificate environment to identify both technical and operational challenges and develop solutions for improvement.
• Analyze data and identify trends to facilitate root cause analysis and identify opportunities for service improvement.
• Participate in capacity planning, performance monitoring, and maintenance to ensure high availability and proactively identify opportunities for service improvement.
• Apply a strong understanding of DevOps principles to daily workflows and automation efforts.

Leadership & Collaboration

• Act as a project lead or participate as a team member on projects involving PKI, certificates, and security.
• Translate business needs into workable technology solutions that meet the needs of internal customers.
• Represent the Crypto Services team on global incident management calls, interacting with other technical teams, customers, or vendors.
• Effectively communicate technical issues and challenges to both technical and non-technical audiences.