{"id":1603101,"url":"https://alion.io/job/charles-schwab-senior-pki-security-engineer","title":"Senior PKI Security Engineer","company":{"id":5314,"name":"Charles Schwab","domain":"schwab.com","url":"https://alion.io/company/charles-schwab-inc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Radancy","truth_index":{"grade":"A","score":99,"open_postings":72,"ghost_share":0,"stale_share":0.167,"repost_share":0.153,"time_to_fill_p50_days":9,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":135000,"max":165000,"currency":"USD","period":"year","gross":null,"usd_annual":165000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Bash","optional":false},{"name":"Java","optional":false},{"name":"Linux","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Active Directory","optional":true},{"name":"CyberArk","optional":true}],"status":"live","first_seen_at":"2026-09-30T00:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-23T00:41:47Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":21},"description":"Your opportunity\nAt Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).\nSchwab’s Security Analytics and Operations organization protects the technology and trust services that enable secure connections across the enterprise. As a Senior PKI Security Engineer, you will help modernize Schwab’s Public Key Infrastructure platform and strengthen the provisioning, renewal, monitoring, and protection of digital certificates.\nYou will use Cybersecurity, Data Encryption, API, and Technical Troubleshooting skills to build automation, integrations, monitoring, and operational controls that improve certificate visibility, platform resilience, and secure application onboarding. Your Problem Solving and Decision-Making skills will help resolve complex certificate, authentication, cryptographic, and trust-related issues while reducing operational risk.\nWorking across architecture, infrastructure, cloud, DevOps, application, and security teams, you will apply Collaboration, Communication, and Adaptability to establish scalable implementation patterns, support reliable PKI services, and advance Schwab’s future-state cryptography capabilities.\nWhat you have\nRequired qualifications\n6+ years of experience in security engineering, infrastructure engineering, PKI engineering, cryptography, software engineering, or a related technology role\nHands-on experience supporting Public Key Infrastructure, Certificate Authorities, certificate lifecycle management, TLS/SSL certificates, key management, certificate chains, and enterprise trust stores\nExperience applying Data Encryption practices, including ciphers, certificate revocation, mutual TLS, key protection, secure certificate deployment, and troubleshooting\nExperience using Python, PowerShell, Java, Bash, or a comparable programming or scripting language to automate operational work\nExperience developing or supporting API integrations, automation, monitoring, and operational workflows in a large enterprise environment\nAbility to apply Technical Troubleshooting and Problem Solving to complex certificates, authentication, cryptographic, and trust-related issues\nAbility to use Communication and Collaboration when partnering with engineering, architecture, infrastructure, operations, and security stakeholders\nLinux and Windows Server Administration experience \nAbility to participate in a rotating on-call schedule supporting a 24x7 environment\nPreferred qualifications\nExperience with Venafi, CyberArk Certificate Manager, Trust Protection Platform, DigiCert, Microsoft Active Directory Certificate Services, EJBCA, or a comparable certificate management platform\nExperience designing or supporting highly available security platforms within financial services, regulated industries, or large enterprise environments\nExperience with authentication and federation technologies, including OAuth, OpenID Connect, SAML 2.0, multifactor authentication, and Active Directory\nExperience using monitoring and observability tools for certificate discovery, expiration alerting, service health monitoring, metrics, log analysis, dashboards, and operational reporting\nFamiliarity with Risk Management, Regulatory Compliance, audit expectations, and security controls related to cryptography and certificate lifecycle management\nWorking knowledge of Windows and Linux Operating Systems\nAbility to provide Technical Leadership, mentor team members, and influence implementation patterns that improve reliability and reduce operational risk\nAdaptability when responding to evolving security requirements, technologies, priorities, and enterprise risks\nFamiliarity with post-quantum cryptography and the future direction of enterprise cryptographic services\nExperience in creating clear technical documentation and audience-focused reporting\nIn addition to the salary range, this role is eligible for bonus or incentive opportunities.\nWhat’s in it for you\nAt Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration-so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.\nWe offer a competitive benefits package that takes care of the whole you - both today and in the future:\n401(k) with company match and Employee stock purchase plan\nPaid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions\nPaid parental leave and family building benefits\nTuition reimbursement\nHealth, dental, and vision insurance","description_format":"text","description_chars":5012,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Hybrid work","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Wealth Management & Financial Advisors","Asset Management & Funds","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-10-01T19:36:17Z"},{"event":"close","at":"2026-10-10T00:55:40Z"},{"event":"reopen","at":"2026-10-13T01:50:59Z"},{"event":"close","at":"2026-10-22T02:08:57Z"},{"event":"reopen","at":"2026-10-22T16:33:46Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 476 · green card filings: 223","filings_12m":476,"filings_prev_12m":595,"green_card_filings_12m":223,"median_offered_wage_usd":155883,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":26}],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.544,"p_room":0.35,"age_days":23,"expected_fill_days":9,"reasons":["conf:2","win:tail","comp:brand"],"computed_at":"2026-10-23T02:57:01Z"},"pay":{"stated_usd_annual":165000,"is_top_pay":false},"html_url":"https://alion.io/job/charles-schwab-senior-pki-security-engineer","json_url":"https://alion.io/job/charles-schwab-senior-pki-security-engineer.json","meta":{"generated_at":"2026-10-23T02:57:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4933,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5314},"rest":"https://alion.io/mcp/rest/get_company?id=5314"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcharles-schwab-senior-pki-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcharles-schwab-senior-pki-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcharles-schwab-senior-pki-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/charles-schwab-senior-pki-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcharles-schwab-senior-pki-security-engineer"}]}