PKI Engineer

Landis+Gyr•Milton, GA

1d•$111,200 - $147,725

About The Position

The Security PKI Engineer operates and supports the company’s symmetric and asymmetric encryption solutions. The role is responsible for the Global PKI Program, enforcing global PKI policies and procedures, supporting the global PKI environment, and working with development and support teams to ensure PKI services are appropriately used and available. The position also supports key and secret services, including global cloud-based key and secret policies, procedures, and solutions. The engineer designs, implements, administers, and supports enterprise PKI and certificate lifecycle solutions across internal, external, customer, manufacturing, and cloud environments. The role includes certificate automation, public certificate services, troubleshooting cryptographic and trust issues, developing architecture standards and operational documentation, and collaborating with infrastructure, cloud, application, DevOps, IAM, and security teams. The engineer also supports disaster recovery and business continuity activities, conducts cryptographic risk assessments, contributes to PKI modernization and post-quantum readiness, and participates in on-call rotations for critical services. The position is based in a typical indoor office environment, with most work involving sitting at a computer. Occasional use of devices such as a phone, copier, printer, or fax may be required. Physical requirements include standing, walking, crouching, handling objects, lifting or moving up to 10 pounds, and viewing a computer screen for extended periods. The role requires the ability to see, hear, and speak in English. Reasonable accommodation is available for individuals with disabilities. Employees are expected to support health, safety, and environmental policies and remain current with company-provided OSHA/safety training. Where required, employees must be able to work while wearing safety equipment.

Requirements

Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent knowledge/training.
At least 5 years of hands-on experience in PKI, Certificate Management, Cryptography, Infrastructure Security, or a related cybersecurity domain.
Experience administering enterprise PKI environments and Certificate Lifecycle Management platforms.
Experience with public certificate authorities, code-signing certificates, and certificate automation frameworks.
Strong understanding of PKI, cryptography, certificate trust models, X.509 certificates, TLS/SSL, PKCS standards, CRL, OCSP, and cryptographic key management.
Knowledge of Windows/Linux environments, Active Directory, LDAP, DNS, web servers, load balancers, and cloud-native certificate services.
Experience with Azure, AWS, or GCP certificate and key management services.
Proficiency in automation and scripting using PowerShell, Python, Bash, REST APIs, ACME, SCEP, EST, and CI/CD integrations.
Ability to troubleshoot complex PKI, TLS/SSL, certificate chain, code-signing, and cryptographic issues across enterprise environments.
Experience developing operational procedures, runbooks, standards, compliance documentation, and audit support activities.
Strong analytical, problem-solving, communication, and stakeholder management skills.
Ability to sit and view a computer screen for long periods and to stand, walk, crouch, handle objects, and lift or move up to 10 pounds.
Ability to see, hear, and speak in English.
Must be able to complete required safety training and, if required, work while wearing safety equipment.

Nice To Haves

Preferred certifications include CISSP, CISM, Microsoft Security Certifications, Keyfactor Certified Professional, or equivalent.
Hands-on experience with enterprise PKI platforms such as Microsoft AD CS, EJBCA, Entrust, or DigiCert, and CLM solutions such as Keyfactor, Venafi, or AppViewX.
Experience managing certificate lifecycle operations, including issuance, renewal, revocation, discovery, validation, automation, and public certificate services.

Responsibilities

Design, implement, administer, and support enterprise PKI solutions, including Microsoft AD CS, EJBCA, and cloud-based PKI services.
Manage certificate lifecycle activities, including discovery, enrollment, issuance, renewal, revocation, replacement, validation, and reporting across internal, external, customer, manufacturing, and cloud environments.
Support and maintain Certificate Lifecycle Management (CLM) platforms such as Keyfactor, Venafi, AppViewX, or equivalent solutions.
Implement and maintain certificate automation using ACME, EST, SCEP, REST APIs, PowerShell, Python, and other automation frameworks.
Manage public certificate services, including DV, OV, EV, code-signing certificates, and public trust relationships.
Perform certificate discovery and inventory assessments across servers, applications, cloud environments, load balancers, network devices, containers, and DevOps platforms.
Troubleshoot and resolve PKI, certificate chain, TLS/SSL, code-signing, cryptographic, OCSP, CRL, and trust-store issues.
Develop and maintain PKI architecture standards, certificate policies, lifecycle processes, operational runbooks, and governance documentation.
Collaborate with infrastructure, cloud, application, DevOps, IAM, and security teams to deploy and maintain secure cryptographic solutions.
Support disaster recovery exercises, PKI operational readiness reviews, backup validation, key ceremonies, and business continuity requirements.
Conduct cryptographic risk assessments and identify weak algorithms, unmanaged certificates, and non-compliant cryptographic implementations.
Participate in PKI modernization initiatives, including CLM migrations, PKI platform upgrades, cloud PKI adoption, and post-quantum cryptography readiness activities.
Participate in operational support and on-call rotations for critical PKI, certificate, and cryptographic service incidents.
Support and adhere to the company’s core values, Code of Conduct, and Ethics Policy.
Perform other duties or responsibilities as assigned or required.
Represent the company in a positive, professional manner when working with internal and external customers.
Support health, safety, and environmental policies and maintain current company-provided OSHA/safety training.