Create a Job Alert.

Enter your email below to save this search and receive job recommendations for similar positions.
Thank you. We'll send jobs matching these to
You already suscribed to this job alert.
No Thanks
What job do you want?

Create Job Alert.

Get similar jobs sent to your email

Apply to this job.
Think you're the perfect candidate?
Apply Now

You’re being taken to an external site to apply.

Enter your email below to receive job recommendations for similar positions.
Sr. PKI Engineer at Ekman Associates

Sr. PKI Engineer

Ekman Associates Los Angeles, CA Full-Time
Apply Now

Create Job Alert.

Get similar jobs sent to your email

Ekman Associates, Inc. is a Southern California based company focused on the following services: Management Consulting, Professional Staffing Solutions, Executive Recruiting and Managed Services.


The Sr. PKI Engineer will support the enterprise PKI service. The Engineer will be responsible for designing, engineering, and supporting the enterprise PKI solutions that enable the management and monitoring of Digital Certificates. Utilizing applied security background, the Engineer will ensure that Digital Certificate Keys are managed in ways to maintain their integrity.

Key Experience:

  • Understanding of Distributed Systems
  • Cloud Computing
  • Security Development
  • Design, develop and operate PKI infrastructure


  • Implement PKI infrastructure within the organization
  • Consult with other members of project team and end users to identify PKI requirements and develop requirements documentation
  • Contribute to the technical direction on all areas of PKI architecture, including policies, standards strategies, automation, and governance. Complete documentation as required in support of this.
  • Provide guidance to key stakeholders on PKI lifecycle, processes, and procedures.
  • Monitoring systems and processes, performing system health checks, maintaining system logs, and troubleshooting of system problems including hardware, application, and operating system related issues
  • System/network certificate management
  • Mobile code signing implementation
  • Management of all certificates and keys, including providing private key recovery and certificate revocation functionality
  • Implement certificate-based authentication for both logical and physical access
  • Successfully adhere to implementation schedules for system deployments and improvements following defined change control processes
  • Ability to brief senior leadership on all PKI related projects and events


  • Bachelor’s Degree in Computer Science, Engineering, Network Security or related field with a minimum of 7 years related experience
  • Excellent verbal and written communication skills and experience writing technical documents such as guides, and other training material related to PKI.  
  • Project/program management experience in enterprise PKI solution deployment, with use of Agile methodology and environments with automated pipelines
  • IT Certifications including Microsoft Certifications, CISSP, GIAC, Security+, and ITIL v3 Foundation certifications
  • International experience beneficial; multiple language skills a plus
  • Subject matter expertise for all areas of certificates and implementation & operation of PKI, with 5+ years of hands-on use in a global enterprise
  • Subject matter expertise for Key Management and Certificate enrollment/revocation processes.
  • Fluency in security & encryption terminology
  • Problem solving and troubleshooting of complex issues.
  • Hands on experience with PKI Registration Authority (RA) issuing and maintaining PKI certificates for machines, identities, and applications.  
  • Cloud Infrastructure experience and deployment of PKI at AWS/Azure/GCP. 
  • Experience with management vaulting solutions such as CyberArk or HashiCorp. 
  • Hands on experience with Microsoft Online Certificate Services Provider (OCSP). 
  • Experience preparing detailed architecture, design documents, authoring Certificate Polices and Certification Practice Statements (CP/CPS) 
  • Holistic view of IAM (Authentication and Authorization Data, Endpoint Security, Network Security, Policy Engine) 
  • Ability to utilize various programming or scripting languages such as Shell scripting, Perl, Python, JavaScript, HTML and PowerShell 
  • Experience with alphabet soup, including OCSP, Microsoft PKI, EJBCA, SAML, Oauth, SSO, Federation, TLS/SSL, AD, ADFS, LDAP, PKI/PKE VPN encryption frameworks
  • 5 - 7 years of professional work experience in a related field such as Public Key Infrastructure, Infrastructure IT (Systems Administration, Network Administration Windows/Linux OS, Network Administration, Active Directory and/or Virtualization).
  • Self-starter/self-directed, able to multitask work and with minimum supervision.  
  • Team player with Passion, drive, energy, a sense of humor, and a can-do approach!

Qualified Candidates Only: If you wish to learn more about this opportunity and additional qualifications/responsibilities, please submit your resume. To learn more about Ekman Associates, Inc. please visit our website at [ Link removed ] - Click here to apply to Sr. PKI Engineer.

Recommended Skills

Information Security
Authorization (Computing)
Public Key Infrastructure
Amazon Web Services
Single Sign On
Apply to this job.
Think you're the perfect candidate?
Apply Now

Help us improve CareerBuilder by providing feedback about this job: Report this job

Report this Job

Once a job has been reported, we will investigate it further. If you require a response, submit your question or concern to our Trust and Site Security Team

CareerBuilder TIP

For your privacy and protection, when applying to a job online, never give your social security number to a prospective employer, provide credit card or bank account information, or perform any sort of monetary transaction. Learn more.

By applying to a job using CareerBuilder you are agreeing to comply with and be subject to the CareerBuilder Terms and Conditions for use of our website. To use our website, you must agree with the Terms and Conditions and both meet and comply with their provisions.