Senior PKI Security Engineer — Automation & Crypto

Veriipro; Boston (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

Veriipro in Boston is seeking a PKI Engineer to design, implement, and maintain enterprise PKI architectures, including multi-tier CA environments. You will manage certificate lifecycles, issue, renew, revoke, and inventory certificates, and administer RAs, ADCS, and HSMs.

You will develop automation using Ansible, Terraform, and PowerShell, support deployments and migrations, and collaborate with security and infrastructure teams to ensure secure, compliant PKI operations.

Qualifications

• Strong understanding of PKI concepts, certificate lifecycle management, and cryptographic principles.
• Experience with enterprise PKI environments, multi-tier PKI architectures.
• Hands-on experience with certificate inventory systems and PKI technologies: RAs, ADCS, HSMs.
• Security-focused background with PKI, cryptography, and certificate security.
• Experience with automation and IaC tools: Ansible, Terraform, PowerShell.

Responsibilities

• Design, implement, and maintain enterprise PKI architectures and multi-tier CA environments.
• Manage certificate lifecycle processes: issuance, renewal, revocation, inventory.
• Administer PKI components: RAs, ADCS, HSMs.
• Develop automation using Ansible, Terraform, and PowerShell.
• Support deployments, upgrades, migrations, and improvements; troubleshoot PKI issues.

Skills

PKI concepts

Cryptography

Troubleshooting

Automation

Analytical thinking

Communication

Education

Bachelor's degree in CS/Engineering or equivalent

Tools

RAs

ADCS

HSMs

Job description

Veriipro in Boston is seeking a PKI Engineer to design, implement, and maintain enterprise PKI architectures, including multi-tier CA environments. You will manage certificate lifecycles, issue, renew, revoke, and inventory certificates, and administer RAs, ADCS, and HSMs.

You will develop automation using Ansible, Terraform, and PowerShell, support deployments and migrations, and collaborate with security and infrastructure teams to ensure secure, compliant PKI operations.