Senior Platform Engineer — Identity & PKI Security

PennyMac Corp.; Westlake Village (CA); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Comprehensive Medical, Dental, and Vis

Paid Time Off Programs

Wellness Programs

Retirement benefits, 401k match

Life insurance

Tuition reimbursement

Philanthropy Programs

Bonus opportunities

Job summary

Pennymac, a leading mortgage finance company, seeks an experienced Platform Engineer to strengthen AWS and Windows environments, focusing on authentication, certificate services, and encryption. You will design and automate identity and cryptographic services across enterprise-scale infrastructure, promoting IaC practices and secure deployment.

Responsibilities include building scalable AWS infrastructure, PKI resilience, certificate automation, and CI/CD pipelines.

Qualifications

• Bachelor's degree or equivalent experience in a relevant field.
• 7+ years in Platform Engineering, DevOps or SRE roles.
• Extensive hands-on AWS experience with ACM, KMS, Secrets Manager, Systems Manager, IAM, EventBridge, Lambda and S3.

Responsibilities

• Design, implement, and manage scalable AWS infrastructure.
• Automate certificate lifecycle at enterprise scale (issuance, renewal, revocation, deployment).
• Maintain PKI, CA operation, inventory, expiry alerting.
• Build event-driven automation in AWS (EventBridge, Lambda, Secrets Manager, SSM, S3).
• Deploy and bind certificates to AWS services and to Windows/Linux servers.
• Design multi-account AWS patterns (cross-account IAM, policies, KMS).
• Administer Active Directory and DNS; support Windows authentication incl. Kerberos/NTLM.
• Implement encryption at rest and in transit; manage keys and rotation.
• Develop IaC with Terraform/OpenTofu and AWS CDK; configure Windows with Chef/Ansible/SSM.
• Design, build, and optimize CI/CD with GitLab CI/CD; enforce security best practices.
• Collaborate with development teams; troubleshoot deployment issues.
• Implement monitoring, logging, and alerting for visibility.

Skills

AWS

Platform Engineering

SRE

DevOps

Terraform/OpenTofu

AWS CDK

GitLab CI/CD

PKI/Certificate Management

Active Directory

PowerShell

Python

Bash

Ansible

Chef

EventBridge

Lambda

IAM

KMS

Security best practices

Networking

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

Terraform/OpenTofu

AWS CDK

GitLab CI/CD

Chef

Ansible

Job description

Pennymac, a leading mortgage finance company, seeks an experienced Platform Engineer to strengthen AWS and Windows environments, focusing on authentication, certificate services, and encryption. You will design and automate identity and cryptographic services across enterprise-scale infrastructure, promoting IaC practices and secure deployment.

Responsibilities include building scalable AWS infrastructure, PKI resilience, certificate automation, and CI/CD pipelines.