W2 contract || Public Key Infrastructure Engineer

About the role

Location: Dallas, TX 75202 (Onsite from day one). Duration: 12+ months contract (W2). Minimum experience: 5+ years. In‑person interview required. Venafi experience is preferred but not required.

Responsibilities

• Ensure processes and controls are developed and implemented around Certificate Authority (CA) Management core, Active Directory, and platform authentication (Windows and Unix).
• Develop and integrate tools to better automate and manage the Public Key Infrastructure and ensure auditability for management of these systems.
• Work cross‑functionally with Security and infrastructure teams to achieve full integration and automation.

Required Skills and Experience

• Working within an agile development methodology (Kanban, Scrum, etc).
• Hands‑on experience with Certificate Life Cycle Management Tool Venafi.
• In‑depth knowledge of managing keys and RBAC via Venafi System.
• Well versed with integration and enrollment via defined workflows.
• Provide manual and automated reports through the Venafi system.
• Experience with continuous delivery and deployment.
• Experience assessing data protection approaches, requirements, and activities.
• Knowledge of Certification Authorities, Two‑Factor Authentication, MFA, LDAP Directories, OCSP, ICAP and related standards.
• Understanding of cryptography, key management, masking, tokenization, or other data protection technologies.
• Experience utilizing and deploying encryption technologies such as TLS, PGP, PKI, and HSM.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing methods.
• Understanding of SSH, especially configuration and use of SSH keys for authentication.
• Experience with high‑level scripting languages (Python) and shell scripting (KSH, Bash, PowerShell).
• Knowledge and experience of network and system security solutions, concepts, and technologies.
• Experience with distributed platforms such as Linux; Windows server experience is a plus.
• Clear and concise communication; comfortable working with all levels in the organization.
• Effective at collaboration and negotiation with internal stakeholders.
• Capable of managing and prioritizing multiple projects with competing resource requirements and timelines.
• 10+ years working in an IT Infrastructure role with associated design experience.

Preferred Qualifications

• Experience with server configuration management / infrastructure automation tools (Ansible, Puppet).
• Experience supporting enterprise server hardware (Dell or HP).
• Experience with Identity Management solutions such as IBM TIM/TAM.
• Experience with IoT devices and management (a plus).
• Ability to design and implement integration solutions for Red Hat products (IdM, Satellite, RHV, RHDS, Ceph, etc.).
• AWS Cloud experience including core services (EC2, S3, ALB/NLB, Lambda, RDS).
• Experience designing, optimizing, and troubleshooting public cloud platforms for large, complex application stacks.
• 3+ years working in a PKI environment; bonus for AWS public cloud experience.