Senior Security Engineer: Certificate Automation Lead

Truist; Wilson (NC); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

401k plan

Paid vacation

Paid holidays

Job summary

Truist is seeking a security engineering professional to advance and scale certificate automation across enterprise environments. You will deploy, install, and validate certificates end-to-end, spanning servers, load balancers, and web servers.

Collaboration with applications and infrastructure teams will reduce manual work and improve reliability. The role emphasizes automation, threat modeling, and cryptography agility, with involvement in policy and lifecycle readiness for evolving

Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• Minimum of 7 years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Design and implement automation solutions focused on certificate installation, deployment, and binding across enterprise platforms (servers, load balancers, web servers, and middleware).
• Extend certificate automation (e.g., Venafi issuance/renewal) into end-to-end lifecycle automation, with emphasis on the last mile deployment.
• Develop and maintain automation frameworks using tools such as Ansible, APIs, and scripting to enable consistent installations.
• Integrate certificate automation with infrastructure platforms including load balancers (F5), web servers (IIS, Apache, NGINX).
• Onboard systems to automated certificate deployment, reducing manual installation and configuration errors.
• Establish and enforce standardized deployment patterns for certificate installation across common platforms.
• Implement pre- and post-installation validation to confirm certificates are deployed and serving traffic.
• Identify and remediate gaps in certificate deployment processes to prevent outages and failed renewals.

Skills

Security engineering

Threat modeling

Penetration testing

Automation tooling

Venafi PKI

CI/CD pipelines

Python scripting

Education

Bachelor’s degree or equivalent

Tools

Ansible

Venafi

APIs

Python

F5

IIS

Apache

NGINX

Job description

Truist is seeking a security engineering professional to advance and scale certificate automation across enterprise environments. You will deploy, install, and validate certificates end-to-end, spanning servers, load balancers, and web servers.

Collaboration with applications and infrastructure teams will reduce manual work and improve reliability. The role emphasizes automation, threat modeling, and cryptography agility, with involvement in policy and lifecycle readiness for evolving