{"id":3117221,"url":"https://alion.io/job/landisgyr-pki-engineer","title":"PKI Engineer","company":{"id":54275,"name":"Landis+Gyr","domain":"landisgyr.com","url":"https://alion.io/company/landis-plus-gyr","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Alpharetta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":111200,"max":147725,"currency":"USD","period":"year","gross":null,"usd_annual":147725},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-22T22:35:09Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-25T05:18:15Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"At Landis+Gyr, we're helping shape the future of energy-making it more intelligent, resilient, and sustainable.\nAs a global energy technology leader, we're accelerating the energy evolution through purposeful innovation and trusted partnerships. Trusted by more than 2,000 utilities worldwide, our intelligent solutions connect devices, data, and decisions across the grid, helping customers modernize infrastructure, optimize operations, and deliver energy that is more reliable, resilient, accessible, safe, and sustainable.\nBehind every solution is a team of approximately 3,300 employees across more than 40 countries who are passionate about solving complex challenges, driving innovation, and making a meaningful impact for our utility customers and the communities they serve.\nJoin Team Green and help shape the future of intelligent energy.\nJob Summary\nThe Security PKI Engineer exists to operate and support the companies symmetric and asymmetric encryption solutions and offerings. This person will have responsibility for the Global PKI Program, including enforcing global PKI policies and procedures, supporting a global PKI environment, and working with development and support teams to ensure PKI services are utilized appropriately and are available. This person is also responsible for supporting other key and secret services, including Cloud based key and secret policies, procedures, and solutions globally.\nKey Responsibilities\nDesign, implement, administer, and support enterprise Public Key Infrastructure (PKI) solutions, including Microsoft AD CS, EJBCA, and cloud-based PKI services.\nManage the complete certificate lifecycle, including certificate discovery, enrolment, issuance, renewal, revocation, replacement, validation, and reporting across internal, external, customer, manufacturing, and cloud environments.\nSupport and maintain Certificate Lifecycle Management (CLM) platforms such as Keyfactor, Venafi, AppViewX, or equivalent solutions.\nImplement and maintain certificate automation using ACME, EST, SCEP, REST APIs, PowerShell, Python, and other automation frameworks.\nManage public certificate services, including Domain Validation (DV), Organization Validation (OV), Extended Validation (EV), code-signing certificates, and public trust relationships.\nPerform certificate discovery and inventory assessments across servers, applications, cloud environments, load balancers, network devices, containers, and DevOps platforms.\nTroubleshoot and resolve complex PKI, certificate chain, TLS/SSL, code-signing, cryptographic, OCSP, CRL, and trust-store related issues.\nDevelop and maintain PKI architecture standards, certificate policies, lifecycle processes, operational runbooks, and governance documentation.\nCollaborate with infrastructure, cloud, application, DevOps, IAM, and security teams to deploy and maintain secure cryptographic solutions.\nSupport disaster recovery exercises, PKI operational readiness reviews, backup validation, key ceremonies, and business continuity requirements.\nConduct cryptographic risk assessments and identify weak algorithms, unmanaged certificates, and non-compliant cryptographic implementations.\nParticipate in PKI modernization initiatives, including CLM migrations, PKI platform upgrades, cloud PKI adoption, and post-quantum cryptography readiness activities.\nParticipate in operational support and on-call rotations for critical PKI, certificate, and cryptographic service incidents.\nCompany Values\nSupports and adheres to Company’s core values.\n\nPerforms other duties or responsibilities as assigned or required.\n\nSupports and adheres to Company’s Code of Conduct and Ethics Policy.\n\nRepresents Company in a positive, professional manner when working with both internal and external customers.\n\nEducation & Experience\nBachelor's degree in Computer Science, Information Security, Engineering, or equivalent knowledge /training.\n5+ years of hands-on experience in PKI, Certificate Management, Cryptography, Infrastructure Security, or a related cybersecurity domain.\nExperience administering enterprise PKI environments and Certificate Lifecycle Management platforms.\nExperience with public certificate authorities, code-signing certificates, and certificate automation frameworks.\nPreferred certifications: CISSP, CISM, Microsoft Security Certifications, Keyfactor Certified Professional, or equivalent.\nPrefeered Qualifications:\nStrong understanding of Public Key Infrastructure (PKI), cryptography, certificate trust models, X.509 certificates, TLS/SSL, PKCS standards, CRL, OCSP, and cryptographic key management.\nHands-on experience with enterprise PKI platforms such as Microsoft AD CS, EJBCA, Entrust, DigiCert, and Certificate Lifecycle Management solutions including Keyfactor, Venafi, or AppViewX.\nExperience managing certificate lifecycle operations, including issuance, renewal, revocation, discovery, validation, automation, and public certificate services.\nStrong knowledge of Windows/Linux environments, Active Directory, LDAP, DNS, web servers, load balancers, and cloud-native certificate services.\nExperience with Azure, AWS, or GCP certificate and key management services.\nProficiency in automation and scripting using PowerShell, Python, Bash, REST APIs, ACME, SCEP, EST, and CI/CD integrations.\nAbility to troubleshoot complex PKI, TLS/SSL, certificate chain, code-signing, and cryptographic issues across enterprise environments.\nExperience developing operational procedures, runbooks, standards, compliance documentation, and audit support activities.\nStrong analytical, problem-solving, communication, and stakeholder management skills.\nWorking Conditions/Physical Requirements:\nWorking Conditions: Typical indoor office environment with the majority of time spent sitting and working on a computer using keyboard, mouse, and monitor. Occasional use of other devices such as: phone, copier/printer/fax, etc. \nPhysical Requirements: Typical office setting. Required to stand; walk; crouch; or handle objects. Lift and/or move up to 10 pounds. Ability to sit and view computer screen for long periods of time. The ability to see, hear, & speak in English. Reasonable accommodation is provided for individuals with disabilities to perform the essential functions. \nPersonal Protection Equipment/Other OHSAS Safety Requirements: Ensure the continued efforts and assist in achieving annual goals of health, safety, and environmental policies. Must be current with available OSHA/Safety Training provided by the Company. If required, must be able to work while wearing safety equipment such as hard hats, work boots, gloves, hearing protection, and others. \nAs a part of the Landis+Gyr family, employees are offered a comprehensive and competitive package of benefits including medical, dental and vision coverage, life insurance, and a 401(k)-retirement plan featuring a generous company match incentive. Additionally, we offer three (3) weeks of Paid Time Off (PTO) as well as eleven (11) paid holidays. We also offer a tuition reimbursement program, optional pet insurance, supplemental medical coverage and a host of other perks to ensure the health, wellness, and enrichment of our team members.\nPay is in the range of $111,200 - $147,725 per year. The actual base salary offered depends on a variety of factors, which may include, as applicable, the qualifications of the individual applicant for the position, years of relevant experience, specific and unique skills, level of education attained, and certifications or other professional licenses held. All candidates are encouraged to apply.\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.\nWe're committed to shaping a better future for everyone. Join Team Green and be part of what's next in energy. #TeamGreen","description_format":"text","description_chars":7933,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Life insurance","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Electrical & Electronic Engineering"],"lifecycle":[{"event":"open","at":"2026-10-22T22:35:09Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":29,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":147725,"is_top_pay":true},"html_url":"https://alion.io/job/landisgyr-pki-engineer","json_url":"https://alion.io/job/landisgyr-pki-engineer.json","meta":{"generated_at":"2026-10-25T10:55:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15622,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":54275},"rest":"https://alion.io/mcp/rest/get_company?id=54275"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flandisgyr-pki-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flandisgyr-pki-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flandisgyr-pki-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/landisgyr-pki-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flandisgyr-pki-engineer"}]}