Senior PKI Security Engineer — Hybrid Onsite Impact

Charles Schwab; Austin (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k) with company match

Employee stock purchase plan

Paid vacation and volunteering time (s

28-day sabbatical after 5 years (elig.

Paid parental leave and familybuilding

Tuition reimbursement

Health, dental, and vision insurance

Job summary

Charles Schwab is seeking an experienced security engineer to advance our certificate and encryption program on-site in Austin. The role focuses on PKI, certificate lifecycle management, TLS/SSL, and key protection within a large enterprise environment.

The ideal candidate brings 6+ years in security/PKI-related roles, hands-on certificate management, and strong scripting ability to automate operational tasks.

Qualifications

• 6+ years of experience in security engineering, infrastructure engineering, PKI engineering, cryptography, software engineering, or a related technology role.
• Hands-on experience supporting Public Key Infrastructure, Certificate Authorities, certificate lifecycle management, TLS/SSL certificates, key management, certificate chains, and enterprise trust stores.
• Experience applying Data Encryption practices, including ciphers, certificate revocation, mutual TLS, key protection, secure certificate deployment, and troubleshooting.
• Experience using Python, PowerShell, Java, Bash, or a comparable programming or scripting language to automate operational work.
• Experience developing or supporting API integrations, automation, monitoring, and operational workflows in a large enterprise environment.
• Ability to apply Technical Troubleshooting and Problem Solving to complex certificates, authentication, cryptographic, and trust-related issues.
• Ability to use Communication and Collaboration when partnering with engineering, architecture, infrastructure, operations, and security stakeholders.
• Linux and Windows Server Administration experience.
• Ability to participate in a rotating on-call schedule supporting a 24x7 environment.

Skills

Security engineering

PKI engineering

Certificate lifecycle

TLS/SSL certs

Key management

Python scripting

Automation workflows

On-call support

Windows/Linux admin

Job description

Charles Schwab is seeking an experienced security engineer to advance our certificate and encryption program on-site in Austin. The role focuses on PKI, certificate lifecycle management, TLS/SSL, and key protection within a large enterprise environment.

The ideal candidate brings 6+ years in security/PKI-related roles, hands-on certificate management, and strong scripting ability to automate operational tasks.