PKI Engineer

About the role

We are looking for a PKI Engineer with strong hands-on experience in enterprise PKI environments, certificate lifecycle management, and security automation. This role will focus on designing, supporting, and improving scalable PKI and encryption solutions while partnering with security and engineering teams to ensure secure, reliable, and efficient certificate management practices.

Responsibilities

• Design, implement, and support enterprise PKI and encryption solutions.
• Manage the full lifecycle of X.509 certificates, including issuance, renewal, revocation, and troubleshooting.
• Develop and maintain scripts, APIs, and automation to streamline certificate management processes.
• Troubleshoot complex PKI, TLS/SSL, and certificate-related issues and perform root cause analysis.
• Build scalable and reusable technical solutions aligned with security and engineering best practices.
• Partner with security and engineering teams to integrate security controls early in the system lifecycle.
• Identify and reduce technical debt while improving reliability, scalability, and operational efficiency.
• Document technical solutions, processes, scripts, and standards.
• Evaluate emerging technologies and contribute to prototypes and architectural improvements.
• Provide technical guidance and support to other engineers when needed.

Requirements

• 3-5 years of related experience in PKI, security engineering, infrastructure security, or a closely related area.
• Strong hands-on experience with PKI and X.509 certificates.
• Solid understanding of TLS/SSL, Certificate Authorities (CA), certificate issuance, renewal, and revocation.
• Experience managing certificates in an enterprise environment using platforms such as Keyfactor, Venafi, DigiCert, Sectigo, Microsoft ADCS, or similar technologies.
• Experience with automation and scripting using PowerShell, Python, APIs, or similar tools.
• Strong troubleshooting and root cause analysis skills.
• Ability to work with cross-functional security, infrastructure, and engineering teams.
• US Citizen, Green Card Holder, or authorized to work in the U.S.

Skills

• Experience with Keyfactor Command (preferred).
• Experience with EJBCA (preferred).
• Familiarity with Azure Key Vault or HashiCorp Vault (preferred).
• Experience with ACME-based certificate automation (preferred).
• Cloud experience with Azure and/or AWS (preferred).
• Experience supporting certificates on technologies such as F5, NGINX, and IIS (preferred).
• Familiarity with DevOps practices and Infrastructure as Code (IaC) (preferred).

Benefits

• Comprehensive medical benefits
• Competitive pay
• 401(k) retirement plan
• …and much more

Pay

W2: $55/hr. • C2C: $60/hr.

Schedule

Fort Worth, TX – 3 days per week onsite.