PKI Engineer

INSPYR Solutions•Fort Worth, TX

14h•Hybrid

About The Position

We are looking for a PKI Engineer with strong hands-on experience in enterprise PKI environments, certificate lifecycle management, and security automation. This role will focus on designing, supporting, and improving scalable PKI and encryption solutions while partnering with security and engineering teams to ensure secure, reliable, and efficient certificate management practices.

Requirements

3–5 years of related experience in PKI, security engineering, infrastructure security, or a closely related area.
Strong hands-on experience with PKI and X.509 certificates.
Solid understanding of TLS/SSL, Certificate Authorities (CA), certificate issuance, renewal, and revocation.
Experience managing certificates in an enterprise environment using platforms such as Keyfactor, Venafi, DigiCert, Sectigo, Microsoft ADCS, or similar technologies.
Experience with automation and scripting using PowerShell, Python, APIs, or similar tools.
Strong troubleshooting and root cause analysis skills.
Ability to work with cross-functional security, infrastructure, and engineering teams.

Nice To Haves

Experience with Keyfactor Command.
Experience with EJBCA.
Familiarity with Azure Key Vault or HashiCorp Vault.
Experience with ACME-based certificate automation.
Cloud experience with Azure and/or AWS.
Experience supporting certificates on technologies such as F5, NGINX, and IIS.
Familiarity with DevOps practices and Infrastructure as Code (IaC).

Responsibilities

Design, implement, and support enterprise PKI and encryption solutions.
Manage the full lifecycle of X.509 certificates, including issuance, renewal, revocation, and troubleshooting.
Develop and maintain scripts, APIs, and automation to streamline certificate management processes.
Troubleshoot complex PKI, TLS/SSL, and certificate-related issues and perform root cause analysis.
Build scalable and reusable technical solutions aligned with security and engineering best practices.
Partner with security and engineering teams to integrate security controls early in the system lifecycle.
Identify and reduce technical debt while improving reliability, scalability, and operational efficiency.
Document technical solutions, processes, scripts, and standards.
Evaluate emerging technologies and contribute to prototypes and architectural improvements.
Provide technical guidance and support to other engineers when needed.