Sr. Security Engineer

We are seeking an experienced PKI Engineer to design, implement, operate, maintain, and enhance enterprise Public Key Infrastructure (PKI) and certificate management services. PKI & Certificate Management: PKI, Certificate Lifecycle Management, Digital Certificates, TLS/SSL, X.509, Certificate Authorities, Trust Stores .

Sr. Security Engineer
Contract/ Contract to hire
Atlanta, GA 

Job Summary
We are seeking an experienced PKI Engineer to design, implement, operate, maintain, and enhance enterprise Public Key Infrastructure (PKI) and certificate management services.
The ideal candidate will have strong experience in cybersecurity engineering, certificate lifecycle management, encryption technologies, security automation, and enterprise infrastructure security.
This role is responsible for ensuring secure authentication, encryption, certificate availability, regulatory compliance, and operational stability across enterprise systems. The PKI Engineer will collaborate with application, infrastructure, and security teams to identify vulnerabilities, implement security solutions, and strengthen the organization's security posture.
 
Key Responsibilities:
PKI Infrastructure Management

• Design, implement, maintain, and enhance enterprise PKI infrastructure and certificate management services.
• Ensure the availability, reliability, resiliency, and patching of PKI systems.
• Manage certificate issuance, renewal, revocation, expiration, and overall lifecycle management.
• Support large-scale certificate environments across enterprise applications, infrastructure, and cloud platforms.
• Ensure timely certificate renewal and replacement to prevent service disruptions.
• Manage trust stores, certificate chains, and certificate integrity.
• Support PKI architecture modernization and improvements in scalability and resilience.

Certificate Automation and Integration

• Design, develop, and implement automation solutions for certificate lifecycle management.
• Integrate PKI services with CI/CD pipelines, cloud services, enterprise applications, and infrastructure platforms.
• Deploy and maintain PKI automation tools, connectors, APIs, and scripting solutions.
• Collaborate with application and infrastructure teams to streamline certificate provisioning and renewal.
• Assist teams with onboarding to PKI services and automation platforms.
• Improve certificate monitoring, visibility, reporting, and compliance tracking.

Information Security and Risk Management

• Design, test, implement, and support security systems and technologies to safeguard enterprise information assets.
• Perform vulnerability assessments, risk analyses, security testing, and infrastructure security evaluations.
• Identify and remediate security vulnerabilities, certificate misconfigurations, trust failures, and expiration risks.
• Implement and maintain firewalls, intrusion detection systems, encryption solutions, and other security controls.
• Investigate security incidents, conduct forensic analysis, and support incident response and recovery activities.
• Develop security controls, access management procedures, and authentication and authorization solutions.
• Collaborate with technical teams to restore systems and recover data following security incidents.
• Develop and maintain security monitoring and alerting mechanisms.

Security Policies and Compliance

• Define, implement, and maintain enterprise security policies, standards, and procedures.
• Establish standards for certificate issuance, validity periods, cryptographic usage, and key management.
• Ensure compliance with applicable regulatory and industry frameworks, including NIST, CMMC, PCI-DSS, and TSA directives.
• Perform security assessments and evaluate compliance with organizational security requirements.
• Recommend improvements to security controls, infrastructure, and risk mitigation strategies.
• Evaluate emerging security technologies and cryptographic standards, including post-quantum cryptography.

Disaster Recovery and Security Operations

• Develop, test, and support disaster recovery and business continuity plans.
• Maintain security procedures for backups, data protection, and incident recovery.
• Monitor security systems and respond to threats and vulnerabilities throughout the project lifecycle.
• Support incident response involving PKI, certificate failures, encryption issues, and authentication problems.
• Prepare technical documentation, security assessment reports, and incident investigation findings.
• Evaluate security tools and recommend technology enhancements based on organizational requirements.

Collaboration and Security Awareness

• Work closely with cybersecurity, application development, infrastructure, and management teams.
• Provide technical guidance on PKI technologies, certificate automation, and security best practices.
• Communicate security incidents, vulnerabilities, and remediation plans to appropriate stakeholders.
• Conduct security awareness training and provide technical support to internal teams.
• Maintain knowledge of industry trends, emerging threats, security technologies, and regulatory requirements.

Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• 3–7+ years of experience in PKI engineering, cybersecurity engineering, or infrastructure security.
• Hands-on experience with enterprise Public Key Infrastructure (PKI) and certificate lifecycle management.
• Experience with PKI platforms and tools such as:
  • Venafi
  • DigiCert
  • Microsoft Certificate Authority (Microsoft CA)
  • AWS Certificate Manager (AWS ACM)
• Strong understanding of TLS/SSL protocols, cryptographic principles, digital certificates, and key management.
• Experience with Hardware Security Modules (HSMs) and cryptographic key custody operations.
• Hands-on experience with PKI automation using APIs, scripting, and CI/CD pipelines.
• Experience with cloud certificate management services in AWS and Azure.
• Knowledge of security and regulatory frameworks, including NIST, PCI-DSS, and CMMC.
• Experience managing and scaling PKI infrastructure in large enterprise environments.
• Familiarity with trust store management and certificate chain validation across distributed systems.
• Understanding of authentication, authorization, encryption, vulnerability management, and security controls.
• Strong troubleshooting, analytical, documentation, and communication skills.

Preferred Qualifications

• Experience implementing enterprise-wide certificate automation solutions.
• Knowledge of post-quantum cryptography and emerging cryptographic standards.
• Experience integrating PKI services into cloud-native and DevOps environments.
• Familiarity with security incident response, disaster recovery, and compliance assessments.
• Experience improving PKI scalability, monitoring, operational efficiency, and resilience.

 
Key Technical Skills:
PKI & Certificate Management: PKI, Certificate Lifecycle Management, Digital Certificates, TLS/SSL, X.509, Certificate Authorities, Trust Stores
PKI Tools: Venafi, DigiCert, Microsoft CA, AWS ACM
Security & Cryptography: HSM, Encryption, Key Management, Authentication, Authorization, Cryptographic Standards
Automation & Cloud: APIs, Scripting, CI/CD Pipelines, AWS, Azure, Certificate Automation
Compliance & Risk: NIST, PCI-DSS, CMMC, Vulnerability Assessment, Security Risk Management
Additional Skills: Incident Response, Disaster Recovery, Security Monitoring, Enterprise Infrastructure Security

 
“All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.”