Summary
✨ AI‑Generated
A security engineering position focused on designing and maintaining certificate and encryption solutions, improving automation, and supporting secure enterprise systems.
Highlights
Hands-on security role involving secure infrastructure improvements, automation, technical problem solving, and collaboration with engineering teams.
Description
We’re looking for a PKI & Encryption Engineer to help build, support, and improve secure certificate and encryption solutions across the organization.
This role is hands-on and will work closely with engineering and security teams to automate processes, solve technical issues, and make sure systems are secure, scalable, and reliable.
You’ll be responsible for designing and supporting PKI solutions, troubleshooting complex technical problems, automating certificate management, and helping teams follow security best practices.
You’ll also have the opportunity to mentor other engineers and help drive improvements across the organization.
What You’ll Do
Build, test, document, and maintain technical solutions, scripts, and processes.Design and support PKI, certificate, and encryption solutions across enterprise environments.Manage and troubleshoot certificate lifecycle processes, including issuance, renewal, installation, and revocation.Identify root causes of technical issues and lead efforts to fix recurring or systemic problems.Automate certificate and security processes using tools like PowerShell, Python, and APIs.Partner with security and engineering teams to build security into solutions early in the development process.Help teams identify and address technical debt and improve existing systems.Think ahead about scalability, performance, reliability, and security when designing solutions.Look for opportunities to standardize and reuse solutions across teams instead of duplicating work.Evaluate new technologies and build prototypes when there’s an opportunity to improve existing solutions.Share technical knowledge and help mentor more junior engineers.Identify opportunities to improve engineering processes and make delivery more efficient.
Top Requirements
3–5 years of related engineering experience.Strong experience with PKI and X.509 certificates, including:TLS/SSLCertificate Authorities (CA)Certificate issuance and renewalCertificate revocationEnterprise certificate lifecycle management experience with platforms such as:KeyfactorVenafiDigiCertSectigoMicrosoft ADCSStrong automation and scripting experience using:PowerShellPythonAPIsAbility to troubleshoot complex technical problems and understand the bigger picture behind them.Strong communication skills and the ability to work with both engineering and security teams.
Nice to Have
Experience with any of the following is a plus:
Keyfactor CommandEJBCAAzure Key VaultHashiCorp VaultACMEAzure or AWSF5NGINXIISDevOps / Infrastructure as Code (IaC)
What We’re Looking For
Someone who is hands-on, technically curious, and comfortable digging into complex PKI and encryption problems.
You should enjoy automation, solving problems at the root cause, and finding ways to make systems more secure, scalable, and easier for engineering teams to manage.
