PKI Engineer

GeekSoft Consulting•Dallas, TX

About The Position

The PKI Engineer designs, develops, implements, and improves processes and controls for Certificate Authority (CA) management, Active Directory, and platform authentication across Windows and Unix environments. The role integrates tools and automates PKI operations to support efficient certificate lifecycle management, security, and auditability. It collaborates with Security and Infrastructure teams on integration, automation, and compliance across enterprise platforms. The engineer also helps design, build, and continuously improve the client’s online platform; researches and implements technology solutions in line with best practices and standards; and supports the resiliency and availability of products. The position may involve infrastructure automation, cloud and distributed platform work, enterprise server hardware, and solution design.

Requirements

10+ years of experience in IT Infrastructure, including infrastructure design and implementation.
3+ years of experience working in a PKI environment.
Hands-on experience with Certificate Lifecycle Management tools, particularly Venafi.
In-depth knowledge of key management, Role-Based Access Control (RBAC), and Venafi administration.
Strong understanding of certificate integration, enrollment, and management through defined workflows.
Experience with Agile development methodologies, including Scrum and Kanban.
Knowledge of Continuous Integration, Continuous Delivery, and Deployment practices.
Strong understanding of Certificate Authorities (CA), Two-Factor Authentication, MFA, LDAP directories, OCSP, ICAM, and related standards.
Good knowledge of cryptography, key management, data masking, tokenization, and other data protection technologies.
Hands-on experience with encryption technologies and protocols, including TLS, PGP, PKI, and HSM.
Understanding of system security vulnerabilities, remediation techniques, and penetration testing principles.
Strong knowledge of SSH, particularly SSH key configuration and authentication.
Scripting experience with Python and shell scripting languages such as KSH, Bash, and PowerShell.
Knowledge of network and system security solutions, concepts, and technologies.
Experience working with distributed platforms, particularly Linux.
Excellent communication, collaboration, and stakeholder management skills.
Experience with infrastructure automation and server configuration management tools such as Ansible and Puppet.
Experience supporting enterprise server hardware, including Dell and HP.
Previous experience in roles such as Technical Architect, Solutions Architect, Technical Design Authority, or Solutions Designer.

Nice To Haves

AWS Public Cloud experience is an added advantage.
Windows Server experience is an added advantage.
Knowledge of Identity Management solutions such as IBM TIM/TAM.
Exposure to IoT devices and their management.
Experience designing and implementing solutions using Red Hat products, including IdM (Identity Management), Satellite, RHV (Red Hat Virtualization), RHDS (Red Hat Directory Server), and Ceph.
AWS Cloud experience with core services such as EC2, S3, ALB/NLB, Lambda, and RDS.
Hands-on experience designing, implementing, and managing AWS cloud solutions.

Responsibilities

Design, develop, and implement processes and controls for CA management, Active Directory, and platform authentication across Windows and Unix environments.
Integrate tools and automate PKI operations to support certificate lifecycle management, security, and auditability.
Collaborate with Security and Infrastructure teams to drive integration, automation, and compliance across enterprise platforms.
Help design, build, and continuously improve the client’s online platform.
Research, suggest, and implement technology solutions following best practices and standards.
Take responsibility for the resiliency and availability of different products.
Assess data protection strategies, requirements, and implementation activities.
Design, implement, manage, optimize, and troubleshoot infrastructure and public cloud solutions for large and complex application environments.
Manage and prioritize multiple projects with competing resource requirements and timelines.
Generate manual and automated reports using Venafi.
Work as a productive member of the team.