Identity Security - PKI Engineer

About the role

The Intel Information Security organization seeks an Identity Security - PKI Engineer to assist senior engineers with designing, deploying, and managing enterprise-grade PKI solutions. This role involves leading certificate lifecycle management efforts, automating PKI-related tasks, collaborating with security, infrastructure, and DevOps teams, developing and enforcing policies, and troubleshooting PKI-related issues.

Responsibilities

• Design, deploy, and manage enterprise-grade PKI solutions.
• Led certificate lifecycle management efforts using various tools.
• Automate PKI-related tasks and processes.
• Collaborate with security, infrastructure, and DevOps teams to integrate PKI solutions with various platforms and applications.
• Develop and enforce policies, standards, and best practices for certificate issuance, renewal, and revocation.
• Monitor PKI infrastructure health, availability, and compliance with internal and regulatory requirements.
• Troubleshoot PKI-related issues including certificate chain validation, CRL/OCSP configurations, and encryption/signing issues.
• Provide documentation, technical guidance, and training to internal teams.

Qualifications

• US Citizenship required.
• Ability to obtain and maintain a US Government Security Clearance.
• Bachelor's degree in Systems Engineering, Cyber Security Engineering, Computer Engineering, Computer Science, Information Systems, or similar discipline and 3+ years of relevant experience in the required skills section, or a Master's degree in Systems Engineering, Cyber Security Engineering, Computer Engineering, Computer Science, Information Systems, or similar discipline field and 2+ years of relevant experience in the required skills section.
• Experience listed below would be obtained through a combination of your degree, research and or relevant previous job and or internship experiences.
• Design, deployment and lifecycle management of Public Key Infrastructure (PKI).
• Understanding of Key length standards and hashing algorithms.
• Experience of PKI integration with Active directory, Identity and PAM solutions.
• Understanding of X.509 certificates, OCSP and Certificate management protocol.

Preferred Qualifications

• Active US Government Top Secret (TS) Security Clearance with the ability to obtain and maintain SCI access.
• Experience with DoD security implementation (e.g. STIG) and security tools for managing the environment.
• Experience with business continuity and disaster recovery.
• Experience with scripting in Windows and UNIX environment.
• Experience with Microsoft SQL Server 2019/2022.
• Experience with Web Tech: HTML, JavaScript, JSP, XML, XSL, and DTD.