Sr. Security Engineer

Pay range: $52.32 - 62.32

Plus Health, Dental, Vision, Short Term/Long Term Disability, and Group Life pending eligibility

YOUR RESPONSIBILITIES IN THIS ROLE:

Ensure availability, resiliency, and patching of PKI infrastructure

Support certificate issuance, renewal, revocation, and lifecycle management

Manage large-scale certificate environments across applications and infrastructure

Ensure timely renewal and replacement of certificates

Support trust store management and certificate chain integrity

Build and implement automation for certificate lifecycle management

Tanesha Magby

Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications)

Deploy and operationalize tools such as connectors and automation pipelines

Enforce security policies related to certificate usage and cryptography

Define and maintain standards for certificate issuance, validity, and usage

Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives)

Partner with application and infrastructure teams to enable certificate automation

Provide guidance and supporting tooling while ensuring clear ownership boundaries

Assist teams with onboarding to PKI services and automation

Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures

Support incident response involving certificate or encryption issues

Improve visibility and reporting for certificate health and compliance

Support adoption of new cryptographic standards (e.g., post-quantum cryptography)

Assist in modernization of PKI architecture and tooling

Evaluate new solutions for scalability and resilience

Quals--

THIS IS A CRITICAL NEED

Must be able to hit the ground running.

WHAT YOU NEED TO SUCCEED (MINIMUM QUALIFICATIONS)

Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)

3-7+ years in PKI, cybersecurity engineering, or infrastructure security

Hands-on experience with certificate lifecycle management

Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM)

Understanding of TLS/SSL, cryptographic principles, and key management

Consistently prioritizes safety and security of self, others, and personal data.

Embraces diverse people, thinking, and styles.

Possesses a high school diploma, GED, or high school equivalency.

Is at least 18 years of age and has authorization to work in the United States.

WHAT WILL GIVE YOU A COMPETITIVE EDGE (PREFERRED QUALIFICATIONS)

Experience with:

HSMs and key custody operations

PKI automation (APIs, pipelines, scripting)

Cloud certificate services (AWS, Azure)

Knowledge of compliance frameworks (NIST, PCI-DSS, CMMC)

Experience scaling PKI in large enterprise environments

Familiarity with trust store management across distributed systems

Equal opportunity employer including disability/veterans.