Senior PKI Security Engineer

About the role

We are seeking a Senior PKI Security Engineer to lead the design, implementation and operation of public key infrastructure solutions for our clients in Atlanta. The role combines deep expertise in PKI, cloud security and automation to ensure robust certificate lifecycle management across hybrid environments.

Key responsibilities

• Architect, design and deploy PKI solutions on AWS and on‑premises, including KMS, CloudHSM, ACM and related services.
• Manage Certificate Authority (CA) operations, digital certificate lifecycle, renewal automation and compliance with Federal PKI policies.
• Integrate Venafi and Microsoft PKI technologies, and support HSM design and implementation.
• Develop and maintain automation scripts (PowerShell, Python, JSON/YAML) for certificate provisioning, monitoring and incident response.
• Collaborate with IAM, security monitoring and cloud security teams to enforce authentication, authorization and governance controls.
• Provide expertise for Windows and Linux server administration, SSL/TLS, LDAPs and Red Hat Certificate System.

Required profile

• 13+ years of experience in cyber security and PKI engineering.
• Proven track record with AWS PKI services and DevOps automation.
• Strong knowledge of federal PKI compliance and certificate governance.
• Relevant certifications such as CISSP, CISM or AWS security/architect certifications are preferred.

Required skills

• Public Key Infrastructure (PKI)
• AWS KMS, CloudHSM, ACM, CloudFront, Secrets Manager, CloudTrail
• PKI architecture, CA management, certificate lifecycle automation
• Venafi, Microsoft PKI, Red Hat Certificate System
• Windows & Linux server administration
• SSL/TLS, HTTPS, LDAPs
• PowerShell, Python, Batch, JSON, YAML scripting
• HSM design and implementation
• IBM Mainframe Encryption (TKE, UKO, SGKLM)
• Identity & Access Management (IAM), authentication and authorization
• Federal PKI compliance
• Cloud security strategy, security monitoring, IT contingency planning
• Agile methodology