Senior PKI Security Engineer: Automation & Compliance

Droisys; Atlanta (GA); On-site; USD 140,000 - 200,000; Full time

Job summary

Droisys is seeking a Sr. PKI Security Engineer in Atlanta (onsite/hybrid) to design, operate, and enhance enterprise PKI and certificate management services.

You will enable secure authentication, encryption, and lifecycle management across critical systems while ensuring regulatory compliance. The role requires 3-7+ years in PKI/security engineering, hands-on experience with Venafi, DigiCert, MS CA, and AWS ACM, and strong knowledge of TLS/SSL and HSMs.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
• 3-7+ years of experience in PKI, cybersecurity engineering, or infrastructure security.
• Hands-on experience with certificate lifecycle management.
• Experience with PKI tools and platforms such as Venafi, DigiCert, Microsoft CA, and AWS ACM.

Responsibilities

• The PKI Engineer designs, operates, and enhances enterprise PKI and certificate management services.
• Support certificate issuance, renewal, revocation, and lifecycle management across applications and infrastructure.
• Build and implement certificate lifecycle automation and integrate PKI with CI/CD pipelines, cloud services, and enterprise apps.
• Identify and remediate risks related to certificate expiration, misconfigurations, and trust failures.

Skills

PKI engineering

Security engineering

Automation

Cloud security

Education

Bachelor's degree in Computer Science or related field

Tools

Venafi

DigiCert

Microsoft CA

AWS ACM

Job description

Droisys is seeking a Sr. PKI Security Engineer in Atlanta (onsite/hybrid) to design, operate, and enhance enterprise PKI and certificate management services.

You will enable secure authentication, encryption, and lifecycle management across critical systems while ensuring regulatory compliance. The role requires 3-7+ years in PKI/security engineering, hands-on experience with Venafi, DigiCert, MS CA, and AWS ACM, and strong knowledge of TLS/SSL and HSMs.