Senior Security Engineer - Certificate Automation Engineer

Regular, full-time position. Fluency in English required. 1st shift (United States of America).

Responsibilities

• Design and implement automation solutions focused on certificate installation, deployment, and binding across enterprise platforms (servers, load balancers, web servers, and middleware).
• Extend existing certificate automation (e.g., Venafi issuance / renewal) into end-to-end lifecycle automation, with emphasis on the “last mile” deployment.
• Develop and maintain automation frameworks using tools such as Ansible, APIs, and scripting to enable consistent and repeatable certificate installs.
• Integrate certificate automation with infrastructure platforms including load balancers (e.g., F5), web servers (IIS, Apache, NGINX), application, and database servers.
• Partner with application and infrastructure teams to onboard systems to automated certificate deployment, reducing manual installation and configuration errors.
• Establish and enforce standardized deployment patterns for certificate installation across common platforms.
• Implement pre- and post-installation validation controls to confirm certificates are correctly deployed, trusted, and actively serving traffic.
• Identify and remediate gaps in certificate deployment processes that contribute to outages, failed renewals, or misconfigurations.
• Support troubleshooting and root cause analysis of certificate-related incidents, with a focus on eliminating recurring issues through automation.
• Collaborate with engineering and business teams to align automation solutions with operational requirements and risk management objectives.
• Contribute to enterprise initiatives supporting shortened certificate lifecycle and crypto agility, ensuring automation solutions scale with increasing renewal frequency.
• Provide technical leadership and guidance on certificate deployment with best practices and automation strategies.
• Lead or contribute to projects with moderate to high complexity, driving delivery of scalable and resilient solutions.

Requirements

• Bachelor’s degree or equivalent education, training, and work-related experience.
• Minimum of 7 years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Qualifications

• Deep specialized and/or broad functional knowledge in enterprise information security technologies including encryption, Public Key Infrastructure (PKI), certificate authorities, identity management, and network security.
• Hands-on experience with certificate lifecycle management, with strong emphasis on certificate deployment and installation across infrastructure platforms.
• Experience working with enterprise systems such as servers, load balancers, and web/application servers.
• Experience developing automation solutions using scripting or automation tools (e.g., Ansible, Python, APIs).
• Strong analytical and problem-solving skills with the ability to troubleshoot complex technical issues.
• Ability to work cross-functionally with technical and non-technical stakeholders.
• Experience with certificate management platforms such as Venafi or similar enterprise PKI solutions.
• Experience integrating automation with ServiceNow or similar workflow/orchestration platforms.
• Hands-on experience automating certificate deployment on platforms such as:
  • Load balancers (e.g., F5)
  • Web servers (IIS, Apache, NGINX)
  • Application servers and middleware
• Familiarity with ACME protocols and API-driven certificate deployment.
• Experience working in large, complex enterprise environments, preferably within financial services or highly regulated industries.
• Understanding of DevOps and CI/CD pipelines as they relate to certificate deployment.
• Exposure to crypto agility concepts, including support for shorter certificate lifecycles and awareness of quantum-safe cryptography initiatives.
• Strong communication skills with the ability to engage effectively with application teams and business stakeholders.
• Relevant certifications such as CISSP, GIAC, or cloud/security certifications are a plus.

Pay

Annual base salary for this position is $120,000–$160,000. Additional incentive pay is available.

Benefits

• Medical, dental, and vision insurance.
• Life insurance, disability, and accidental death and dismemberment coverage.
• Tax-preferred savings accounts and a 401k plan.
• No less than 10 days of vacation (prorated based on date of hire and full-time/part-time status) during the first year of employment, along with 10 sick days and paid holidays.
• Eligibility for defined benefit pension plan, restricted stock units, and/or a deferred compensation plan, depending on the position and division.