PKI Engineer

About the role

The Public Key Infrastructure Engineer will ensure processes and controls are developed and implemented around the Certificate Authority (CA) Management core, Active Directory, and platform authentication (Windows and Unix). The role involves developing and integrating tools to automate and manage PKI while ensuring auditability, and working cross‑functionally with Security and infrastructure teams to achieve full integration and automation.

Responsibilities

• Ensure processes and controls are developed and implemented around the CA Management core, Active Directory, and Windows/Unix platform authentication.
• Develop and integrate tools to automate and manage the Public Key Infrastructure and ensure auditability.
• Work cross‑functionally with Security and infrastructure to achieve full integration and automation.

Required Skills

• Working within an agile development methodology (Kanban, Scrum, etc)
• Hands‑on experience with Certificate Life Cycle Management Tool – Venafi
• In‑depth knowledge of managing keys and RBAC via Venafi System
• Well versed with integration and enrollment via defined workflows
• Responsible for providing manual and automated reports through the Venafi system
• Experience with continuous delivery and deployment
• Experience assessing data protection approaches, requirements, and activities
• Knowledge of Certification Authorities, Two‑Factor Authentication, MFA, LDAP Directories, OCSP, ICAM and related standards
• Understanding of cryptography, key management, masking, tokenization, or other data protection technologies
• Experience utilizing and deploying encryption technologies such as TLS, PGP, PKI, and HSM
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing methods, principles and concepts
• Understanding of SSH, especially the configuration and use of SSH keys for authentication
• Experience with high‑level script languages such as Python, along with shell scripting in KSH, Bash, and PowerShell
• Knowledge and experience of network and system security solutions, concepts, and technologies
• Experience with distributed platforms such as Linux (Windows server is a plus)
• Clear and concise communication; comfortable working with all levels in the organization
• Effective at both collaboration and negotiation with internal stakeholders
• Capable of managing and prioritizing multiple projects with competing resource requirements and timelines
• 10+ years working in an IT Infrastructure related role with associated design experience

Preferred Qualifications

• Demonstrated experience with server configuration management (infrastructure automation) tools (e.g., Ansible, Puppet)
• Experience supporting enterprise server hardware (Dell or Client)
• Experience with Identity Management solutions such as IBM's TIM/TAM
• Experience with IoT devices and management (a plus)
• Design and implement solutions for integration within client environments for various Red Hat products such as IdM, Satellite, RHV, RHDS, Ceph, etc.
• AWS Cloud experience including core services EC2, S3, ALB/NLB, Lambda, RDS
• Experience designing, optimizing, and troubleshooting public cloud platforms associated with large, complex application stacks
• 3+ years working in a PKI environment; bonus for AWS public cloud experience
• AWS hands‑on experience designing and managing AWS cloud solutions
• Previous experience as a Technical Architect, Solutions Architect, Technical Design Authority, or Solutions Designer (preferred)

Location: Dallas, TX 75202
Mode: Contract (6+ Months) - Onsite
Note: In‑person interview required