PKI Senior Security Engineer

JC: 1505824

Job Title: Specialist - CyberSecurity

Work Location: Atlanta, Georgia(Onsite)

Employment Type: Full Time

Max Salary : $110k- $130k per Annum

PKI Senior Security Engineer

Job description

The PKI Engineer is responsible for designing operating and enhancing the enterprise Public Key Infrastructure PKI and certificate management services

This role ensures secure authentication encryption and certificate life cycle management across enterprise systems supporting regulatory compliance and operational stability

Ensure availability resiliency and patching of PKI infrastructure

Support certificate issuance renewal revocation and lifecycle management

Manage large scale certificate environments across applications and infrastructure

Ensure timely renewal and replacement of certificates

Support trust store management and certificate chain integrity

Build and implement automation for certificate lifecycle management

Integrate PKI services with enterprise platforms CI/CD pipelines cloud services applications

Deploy and operationalize tools such as connectors and automation pipelines

Enforce security policies related to certificate usage and cryptography

Define and maintain standards for certificate issuance validity and usage

Support compliance with regulatory frameworks eg NIST CMMC PCI TSA directives

Partner with application and infrastructure teams to enable certificate automation

Provide guidance and supporting tooling while ensuring clear ownership boundaries

Assist teams with onboarding to PKI services and automation

Identify and remediate risks related to certificate expiration misconfiguration or trust failures

Support incident response involving certificate or encryption issues

Improve visibility and reporting for certificate health and compliance

Support adoption of new cryptographic standards eg postquantum cryptography

Assist in modernization of PKI architecture and tooling

Evaluate new solutions for scalability and resilience

Qualifications

Bachelors degree in Computer Science Cybersecurity or related field or equivalent experience.

3-7 years in PKI cybersecurity engineering or infrastructure security.

Handson experience with certificate lifecycle management.

Experience with PKI toolsplatforms eg Venafi DigiCert Microsoft CA AWS ACM.

Understanding of TLSSSL cryptographic principles and key management.

Experience with

HSMs and key custody operations

PKI automation APIs pipelines scripting

Cloud certificate services AWS Azure

Knowledge of compliance frameworks NIST PCIDSS CMMC

Experience scaling PKI in large enterprise environments

Familiarity with trust store management across distributed systems

Responsibilities

Responsible for the design testing evaluation implementation support management and deployment of security systemsdevices used to safeguard the organizations information assets

Also responsible for analyzing the information security environment and assisting with the development of security measures to safeguard information against accidental or unauthorized modification destruction or disclosure

Works with the technical team to recover data after a security breach Configures and installs firewalls and intrusion detection systems

Develops automation scripts to handle and track incidents

Investigates intrusion incidents conducts forensic investigations and mounts incident responses

Delivers technical reports and formal papers on test findings

Installs firewalls data encryption and other security measures

Maintains access by providing information resources and technical support

Ensures authorized access by investigating improper access revoking access reporting violations monitoring information requests by new programming recommending improvements

Updates job knowledge by participating in educational opportunities reading professional publications maintaining personal networks participating in professional organizations

Accomplishes information systems and organization mission by completing related results as needed

Builds deploys and tracks security measurements for computer systems and networks

Mitigates security vulnerabilities by implementing applicable solutions and tools

Performs vulnerability testing risk analyses and security assessments

Collaborates with colleagues on authentication authorization and encryption solutions

Tests security solutions using industry standard analysis criteria

Responds to information security issues during each stage of a projects lifecycle

Performs risk assessments and testing of data processing systems

Establishes system controls by developing framework for controls and levels of access recommending improvements

Establishes computer and terminal physical security by developing standards policies and procedures coordinates with facilities security recommends improvements

Safeguards computer files by performing regular backups developing procedures for source code management and disaster