| Location | Denver, CO (Remote) |
We are seeking an experienced Senior Cryptographic & Directory Services Engineer to lead the optimization, automation, and ongoing enhancement of our enterprise cryptographic and identity platforms. In this role, you will design robust risk mitigation controls, maintain strategic engineering roadmaps, serve as a high-level escalation point for Directory Services, and ensure our infrastructure is prepared for evolving industry security standards.
Cryptographic Engineering & Modernization: Lead the optimization, enhancement, and systems integration of enterprise cryptographic platforms, driving automation and preparing infrastructure for future industry standards.
Security & System Hardening: Design and implement risk mitigation and systems-hardening controls, including delegation management, monitoring, patching, and optimization.
Escalation & Automation Support: Serve as a Tier-3 escalation point for the Directory Services administration team to resolve complex technical issues; develop workflows and tooling to automate routine administrative tasks.
Architecture & Roadmapping: Assist in designing and maintaining technical roadmaps, engineering priorities, and architecture standards for Directory Services and Public Key Infrastructure (PKI).
Initiative & Delivery Management: Manage timelines, deliverables, and proofs of concept (POCs) for engineering priorities aligned with Architecture Review Board (ARB) governance.
Cross-Functional Collaboration: Actively contribute to technical subcommittees, engineering forums, new technology assessments, and steering committees.
General Engineering: Fulfill additional engineering and infrastructure duties as required.
PKI & Cryptography: 7–10 years of hands-on experience managing enterprise certificate management and cryptographic platforms; expert knowledge of PKI architecture, lifecycle management, and design.
Hardware Security Modules (HSM): Demonstrated experience with HSM platform deployment, operations, key ceremony procedures, and troubleshooting.
Directory Services & Secrets Management: 5+ years of engineering experience in Directory Services/DevOps environments, specifically developing and automating workflows for secrets management.
Scripting & Automation: Advanced scripting proficiency in PowerShell; experience building end-to-end automations.
Cloud Infrastructure: Proven experience with major cloud platforms (Azure, AWS, or GCP), with deep familiarity in cloud key management services (e.g., Azure Key Vault).
DevOps & IaC: Proven track record deploying Infrastructure as Code (IaC) and developing/maintaining CI/CD deployment pipelines.
Cross-Functional Delivery: 5+ years collaborating with cross-functional technical teams, project managers, and operational stakeholders to deliver enterprise IT solutions.
Operational Frameworks: Solid working knowledge of ITIL processes (Incident, Request, Problem, and Change Management).
Communication: Strong communication skills with the ability to bridge technical discussions between business owners, PMs, and operational teams.
Experience with Keyfactor certificate lifecycle automation platforms (highly preferred).
Hands-on experience with enterprise secrets vaults such as CyberArk or HashiCorp Vault.
Practical experience developing application-to-application integrations leveraging REST APIs.