Senior PKI Security Engineer: Certificate Automation

Charles Schwab Corporation; Southlake (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Charles Schwab Corporation in Texas is seeking a Senior PKI Security Engineer to modernize Schwab's Public Key Infrastructure and strengthen certificate provisioning, renewal, monitoring, and trust management. This on-site role focuses on scalable PKI services and secure onboarding across disciplines.

You will build automation, integrations, monitoring, and operational controls; resolve complex certificate and cryptography issues; contribute to risk reduction and reliability.

Qualifications

• 6+ years in security/PKI engineering or related tech roles.
• Hands-on PKI, CA, certificate lifecycle, TLS/SSL and trust stores.
• Experience with data encryption, certificate deployment and troubleshooting.
• Scripting/automation experience (Python, PowerShell, Bash, Java).
• Experience designing or supporting API integrations, automation, monitoring.
• Strong communication and collaboration across teams; on-call rotation.

Responsibilities

• Modernize Schwab's PKI platform and strengthen provisioning, renewal and monitoring.
• Build automation, integrations, monitoring, and controls for certificate visibility.
• Resolve complex certificate, authentication and cryptography issues.
• Collaborate with architecture, infrastructure, DevOps, and security teams.
• Support a 24x7 environment with rotating on-call duties.

Skills

Security engineering

PKI engineering

Cryptography

Software engineering

Python

PowerShell

Java

Bash

Automation

Scripting

Troubleshooting

Communication

Collaboration

Linux administration

Windows Server administration

On-call support

Tools

Venafi

CyberArk Certificate Manager

Trust Protection Platform

DigiCert

Active Directory Certificate Services

EJBCA

Job description

Charles Schwab Corporation in Texas is seeking a Senior PKI Security Engineer to modernize Schwab's Public Key Infrastructure and strengthen certificate provisioning, renewal, monitoring, and trust management. This on-site role focuses on scalable PKI services and secure onboarding across disciplines.

You will build automation, integrations, monitoring, and operational controls; resolve complex certificate and cryptography issues; contribute to risk reduction and reliability.