Senior PKI Security Engineer

Delan Associates, Inc•Atlanta, GA

1d•Hybrid

About The Position

We are seeking a highly skilled and experienced Senior PKI Security Engineer to join our team. This role will be responsible for the architecture, design, implementation, and administration of our Public Key Infrastructure (PKI) systems. The ideal candidate will have extensive experience with PKI technologies, cloud security, and automation, with a strong understanding of cybersecurity principles. This is a hybrid role based in Atlanta, GA, with relocation assistance available.

Requirements

13+ years of experience in Cyber Security.
Extensive experience with Public Key Infrastructure (PKI).
Proficiency in AWS PKI Services (KMS, CloudHSM, ACM, CloudFront, Secrets Manager, CloudTrail).
Experience with AWS DevOps & Automation.
Strong background in PKI Architecture, Design, Implementation & Administration.
Expertise in Certificate Authority (CA) Management.
Deep understanding of Digital Certificate Lifecycle Management.
Experience with Certificate Renewal Automation.
Experience with Venafi Integration & Certificate Management.
Knowledge of Microsoft PKI Technologies.
Proficiency in Windows & Linux Server Administration.
Understanding of SSL/TLS, HTTPS, LDAPs.
Scripting skills in PowerShell, Python, Batch, JSON, YAML.
Experience with HSM (Hardware Security Module) Design & Implementation.
Experience with IBM Mainframe Encryption (TKE, UKO, SGKLM).
Knowledge of Identity & Access Management (IAM).
Understanding of Authentication, Authorization & Certificate Governance.
Familiarity with Federal PKI (FPKI) / Common Policy Authority Compliance.
Experience with Red Hat Certificate System.
Knowledge of Cloud Security Strategy & Engineering.
Experience with Security Monitoring & Compliance.
Familiarity with IT Contingency Planning.
Experience working in an Agile Methodology.

Nice To Haves

CISSP certification
CISM certification
AWS Certified Solutions Architect
AWS Certified Security Specialty
AWS Certified Developer
AWS Certified SysOps Administrator

Responsibilities

Design, implement, and administer Public Key Infrastructure (PKI) systems.
Manage Certificate Authorities (CAs) and oversee the digital certificate lifecycle.
Automate certificate renewal processes.
Integrate and manage certificate management solutions like Venafi.
Administer Microsoft PKI technologies and Windows & Linux servers.
Implement and manage SSL/TLS, HTTPS, and LDAPs.
Develop and maintain scripts for automation (PowerShell, Python, Batch, JSON, YAML).
Design and implement Hardware Security Modules (HSMs).
Manage IBM Mainframe Encryption technologies (TKE, UKO, SGKLM).
Implement and manage Identity and Access Management (IAM) solutions, including authentication, authorization, and certificate governance.
Ensure compliance with Federal PKI (FPKI) / Common Policy Authority standards.
Administer Red Hat Certificate System.
Develop and execute cloud security strategies and engineering.
Implement security monitoring and compliance measures.
Contribute to IT contingency planning.
Work within an Agile methodology.