Senior PKI Security Engineer

Delan Associates•Atlanta, GA

6d•Hybrid

About The Position

We are seeking a highly experienced Senior PKI Security Engineer to join our team. This role involves designing, implementing, and administering Public Key Infrastructure (PKI) solutions, with a strong focus on AWS PKI services and automation. The ideal candidate will have extensive experience in cybersecurity, PKI architecture, certificate lifecycle management, and integration with various security tools and platforms, including Venafi and IBM Mainframe Encryption. This is a hybrid role based in Atlanta, GA, with relocation assistance available.

Requirements

Cyber Security expertise
Public Key Infrastructure (PKI) knowledge
Experience with AWS PKI Services – KMS, CloudHSM, ACM, CloudFront, Secrets Manager, CloudTrail
Experience with AWS DevOps & Automation
Proficiency in PKI Architecture, Design, Implementation & Administration
Experience in Certificate Authority (CA) Management
Experience with Digital Certificate Lifecycle Management
Experience with Certificate Renewal Automation
Experience with Venafi Integration & Certificate Management
Knowledge of Microsoft PKI Technologies
Experience with Windows & Linux Server Administration
Understanding of SSL/TLS, HTTPS, LDAPs
Scripting skills: PowerShell, Python, Batch, JSON, YAML
Experience with HSM (Hardware Security Module) Design & Implementation
Experience with IBM Mainframe Encryption (TKE, UKO, SGKLM)
Knowledge of Identity & Access Management (IAM)
Understanding of Authentication, Authorization & Certificate Governance
Familiarity with Federal PKI (FPKI) / Common Policy Authority Compliance
Experience with Red Hat Certificate System
Experience in Cloud Security Strategy & Engineering
Experience with Security Monitoring & Compliance
Experience with IT Contingency Planning
Familiarity with Agile Methodology
Minimum 13 years of experience

Nice To Haves

CISSP certification
CISM certification
AWS Certified Solutions Architect
AWS Certified Security Specialty
AWS Certified Developer
AWS Certified SysOps Administrator

Responsibilities

Design, implement, and administer Public Key Infrastructure (PKI) solutions.
Utilize AWS PKI Services including KMS, CloudHSM, ACM, CloudFront, Secrets Manager, and CloudTrail.
Develop and implement AWS DevOps & Automation strategies for PKI.
Manage Certificate Authority (CA) operations and digital certificate lifecycle.
Automate certificate renewal processes.
Integrate and manage certificates using Venafi.
Work with Microsoft PKI Technologies.
Administer Windows and Linux Servers.
Implement and manage SSL/TLS, HTTPS, and LDAPs.
Develop scripts in PowerShell, Python, Batch, JSON, and YAML for automation.
Design and implement Hardware Security Modules (HSM).
Manage IBM Mainframe Encryption technologies (TKE, UKO, SGKLM).
Implement and manage Identity & Access Management (IAM) solutions.
Ensure Authentication, Authorization, and Certificate Governance.
Comply with Federal PKI (FPKI) / Common Policy Authority standards.
Utilize Red Hat Certificate System.
Contribute to Cloud Security Strategy & Engineering.
Perform Security Monitoring & Compliance activities.
Develop IT Contingency Plans.
Work within an Agile Methodology.