Sr. Security Engineer with (PKI Infrastructure & Operations)

Role: Sr. Security Engineer with (PKI Infrastructure & Operations)

Location: Atlanta, GA

Duration: Long Term

Responsibilities

1. PKI Infrastructure & Operations

Ensure availability, resiliency, and patching of PKI infrastructure

Support certificate issuance, renewal, revocation, and lifecycle management

2. Certificate Lifecycle Management

Manage large-scale certificate environments across applications and infrastructure

Ensure timely renewal and replacement of certificates

Support trust store management and certificate chain integrity

3. Automation & Integration

Build and implement automation for certificate lifecycle management

Tanesha Magby

Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications)

Deploy and operationalize tools such as connectors and automation pipelines

4. Governance, Standards & Policy Enforcement

Enforce security policies related to certificate usage and cryptography

Define and maintain standards for certificate issuance, validity, and usage

Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives)

5. Cross-Team Collaboration

Partner with application and infrastructure teams to enable certificate automation

Provide guidance and supporting tooling while ensuring clear ownership boundaries

Assist teams with onboarding to PKI services and automation

6. Risk Reduction & Incident Support

Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures

Support incident response involving certificate or encryption issues

Improve visibility and reporting for certificate health and compliance

7. Emerging Crypto & Future Readiness

Support adoption of new cryptographic standards (e.g., post-quantum cryptography)

Assist in modernization of PKI architecture and tooling

Evaluate new solutions for scalability and resilience

Quals--

(WHAT YOU NEED TO SUCCEED (MINIMUM QUALIFICATIONS)

Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)

3–7+ years in PKI, cybersecurity engineering, or infrastructure security

Hands-on experience with certificate lifecycle management

Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM)

Understanding of TLS/SSL, cryptographic principles, and key management

Consistently prioritizes safety and security of self, others, and personal data.

Embraces diverse people, thinking, and styles.

Possesses a high school diploma, GED, or high school equivalency.

Is at least 18 years of age and has authorization to work in the United States.

WHAT WILL GIVE YOU A COMPETITIVE EDGE (PREFERRED QUALIFICATIONS)

Experience with

HSMs and key custody operations

PKI automation (APIs, pipelines, scripting)

Cloud certificate services (AWS, Azure)

Knowledge of compliance frameworks (NIST, PCI-DSS, CMMC)

Experience scaling PKI in large enterprise environments

Familiarity with trust store management across distributed systems