PKI Engineer Job at Collabera (Charlotte, NC / Denver, CO)

PKI Engineering Group Manager

Within Citi, the PKI Engineering Team is focusing on cryptographic protocols, ma...

Location

Hungary , Budapest

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

10+ years experience in cryptography, PKI, and strong understanding of cryptography and mathematical algorithms
Understanding the principles related to PKI, private keys, encryption methods, CRL, advanced key usages and post quantum cryptography
Deep Understanding of Microsoft Windows and Linux operating systems and cryptographic protocols
Knowledge of Crypto Libraries (bouncy castle)
Symmetric Key Encryption and Asymmetric Encryption
Experience with a variety of HSM platforms, Certificate Authority systems and Cloud Providers
Working with Trust Providers is a plus
Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
Demonstrated analytic/diagnostic skills
Ability to work in a matrix environment and partner with virtual teams

Job Responsibility

Manage a team of Public key Infrastructure(PKI) engineers, supporting certificate solutions for internal and external stakeholders, drive projects within the group and creating a technology domain roadmap
Ensure that all integration of functions meet business goals
Define necessary system enhancements to deploy new products and process enhancements
Recommend suitable products or product customization for system integration
Identify problem causality, business impact and root causes
Create PKI solutions for a large company
Improve engineering capabilities for timely delivery of projects
Collaborate with partners in Engineering, Operations and Business
Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements
Provide occasional 4th level engineering support for the product toolset

What we offer

Cafeteria Program
Home Office Allowance (for colleagues working in hybrid work models)
Paid Parental Leave Program (maternity and paternity leave)
Private Medical Care Program and onsite medical rooms at our offices
Pension Plan Contribution to voluntary pension fund
Group Life Insurance
Employee Assistance Program
Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
Flexible work arrangements to support you in managing work - life balance
Career progression opportunities across geographies and business lines

Fulltime

Systems Engineer

Dig in with your teams to effectively perform requirements analysis, refinement,...

Location

United States , Annapolis Junction

Salary:

136000.00 - 250000.00 USD / Year

LufCo

Expiration Date

Until further notice

Requirements

Bachelors degree in a Technical or related discipline is required
5 years of additional experience may be substituted for a bachelors degree
7 years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity
Experience with Atlassian suite of products
Strong communication
Ability to manage customer and development team expectations
Proven ability to problem solve with sometimes limited resources
Exposure to Agile methodologies
Active TS/SCI with Polygraph clearance

Job Responsibility

Drive next generation PKI architecture forward utilizing commercial and government best practices for ensuring secure key solutions
Planning, implementation, and evolution of PKI solution sets for evaluation and analysis as part of existing system modernization efforts
Ability to see impacts of system changes at scale, minimizing technical debt and critical thinking related to strategic moves regarding Identity, Credentialing, and Access Management Solutions
Provide fundamental knowledge on applying technologies like containerization to legacy physical workloads, the ability to identify automation improvements, and the ability to communicate pros/cons as part of the technical decision making process
Documenting, maintaining and representing stakeholder priorities in regards to Certificate products and services impacting thousands of users and systems worldwide
Advocate for automation in all aspects of the system (build, deployment, test, updating, and monitoring)

What we offer

Paid Time Off
401K Contribution and Employer Match Contributions
Medical, Dental, and Vision Coverage
Tuition reimbursement

Fulltime

Product Security Engineer

As a Product Security Engineer specializing in cryptography and PKI, you will de...

Location

United States , Palo Alto

Salary:

Not provided

1X Technologies

Expiration Date

Until further notice

Requirements

Strong experience with cryptography, PKI design, and key management
Experience working with hardware security modules (HSMs), including vendor selection, integration, and root‑of‑trust establishment
Familiarity with remote device attestation frameworks (such as fTPM, OP‑TEE, or similar)
Demonstrated ability to design and scale secure firmware signing and code signing pipelines
Proven track record in defining and enforcing trust policies (key generation, rotation, destruction) and provisioning mechanisms
Experience securing build/artifact pipelines and developing secure communication protocols
Ability to work cross‑functionally with hardware, software, security operations, and infrastructure teams
High attention to detail, strong problem solving, with a mindset of anticipating vulnerabilities and designing defendable systems

Job Responsibility

Design and manage end‑to‑end cryptographic services, including public key infrastructure (PKI) and key lifecycle management
Establish HSM infrastructure as the root‑of‑trust for firmware signing and IoT endpoint authentication
Lead evaluation, procurement, installation, configuration, and integration of HSM vendor solutions
Architect key management systems that scale from hundreds of devices today to millions over time
Design remote device attestation mechanisms (e.g. fTPM, OP‑TEE, or equivalent) tied to the HSM root‑of‑trust
Build and automate secure firmware/bootloader signing pipelines
Define trust infrastructure and policies for author key generation, provisioning, rotation, and destruction
Secure build/artifact pipelines and code‑signing workflows
Develop factory provisioning architecture for mass key/certificate distribution
Support the development of secure communication protocols

Fulltime

Senior Security Operations Engineer II

As a Senior Security Operations Engineer, you’ll play a key role in ensuring the...

Location

United States , Scottsdale

Salary:

Not provided

Axon

Expiration Date

Until further notice

Requirements

7+ years of experience in operations, site reliability, or infrastructure engineering roles
Strong experience securing and managing cloud environments (e.g., AWS, Azure) and containerized workloads
Deep understanding of Linux systems, networking, distributed systems, and their associated security controls
Proficiency in automation, scripting, and security tooling integration to streamline operations and enforcement
Experience with security monitoring, alerting, SIEM platforms, and observability tools
Solid grasp of CI/CD practices with integrated security testing and compliance checks
Experience managing Kubernetes clusters and running containerized workloads in production
Experience with deploying and administrating any of the following: scalable cloud native secrets solutions such as AWS KMS, Azure KeyVault
PKI solutions such as EJBCA, Smallstep, Venafi
or vaulting solutions such as Hashicorp Vault

Job Responsibility

Implementing and improving automated security checks in CI/CD pipelines to prevent vulnerabilities from reaching production
Writing, reviewing, and maintaining security-focused infrastructure-as-code for scalable and compliant deployments
Investigating security incidents, performing root cause analysis, and implementing long-term mitigation strategies
Collaborating with developers to develop new features, services, and infrastructure requirements
Enhancing security observability through improved log collection, metrics, and alerting configurations
Maintaining and improving security runbooks, incident response playbooks, and internal security tooling for operational efficiency
Resolve security/infrastructure incidents by participating in high impact/high visibility incidents as a participant and ideally as an incident commander
Maintain and secure critical infrastructure components such as PKI (Public Key Infrastructure) and IAM ( Identity & Access Management) systems, ensuring reliability, scalability, and compliance with organizational and industry security standards
Build and maintain secure, reliable, and scalable infrastructure that protects core services and sensitive data
Troubleshoot and resolve complex operational and system-level issues across environments

What we offer

Competitive salary and 401k with employer match
Discretionary paid time off
Paid parental leave for all
Medical, Dental, Vision plans
Fitness Programs
Emotional & Mental Wellness support
Learning & Development programs
Snacks in our offices

Fulltime

Senior Security Operations Engineer II

As a Senior Security Operations Engineer, you’ll play a key role in ensuring the...

Location

United States , Scottsdale

Salary:

Not provided

Axon

Expiration Date

Until further notice

Requirements

7+ years of experience in operations, site reliability, or infrastructure engineering roles
Strong experience securing and managing cloud environments (e.g., AWS, Azure) and containerized workloads
Deep understanding of Linux systems, networking, distributed systems, and their associated security controls
Proficiency in automation, scripting, and security tooling integration to streamline operations and enforcement
Experience with security monitoring, alerting, SIEM platforms, and observability tools
Solid grasp of CI/CD practices with integrated security testing and compliance checks
Experience managing Kubernetes clusters and running containerized workloads in production
Experience with deploying and administrating any of the following: scalable cloud native secrets solutions such as AWS KMS, Azure KeyVault
PKI solutions such as EJBCA, Smallstep, Venafi
or vaulting solutions such as Hashicorp Vault

Job Responsibility

Implementing and improving automated security checks in CI/CD pipelines to prevent vulnerabilities from reaching production
Writing, reviewing, and maintaining security-focused infrastructure-as-code for scalable and compliant deployments
Investigating security incidents, performing root cause analysis, and implementing long-term mitigation strategies
Collaborating with developers to develop new features, services, and infrastructure requirements
Enhancing security observability through improved log collection, metrics, and alerting configurations
Maintaining and improving security runbooks, incident response playbooks, and internal security tooling for operational efficiency
Resolve security/infrastructure incidents by participating in high impact/high visibility incidents as a participant and ideally as an incident commander
Maintain and secure critical infrastructure components such as PKI (Public Key Infrastructure) and IAM ( Identity & Access Management) systems, ensuring reliability, scalability, and compliance with organizational and industry security standards
Build and maintain secure, reliable, and scalable infrastructure that protects core services and sensitive data
Troubleshoot and resolve complex operational and system-level issues across environments

What we offer

Competitive salary and 401k with employer match
Discretionary paid time off
Paid parental leave for all
Medical, Dental, Vision plans
Fitness Programs
Emotional & Mental Wellness support
Learning & Development programs
Snacks in our offices

Fulltime

PKI Engineer

About the Role: Infrastructure engineer. Certificate Management experience & PKI...

Location

United States , Chicago, IL / Denver, CO

Salary:

65.00 - 68.00 USD / Hour

Collabera

Expiration Date

March 19, 2026

Requirements

Infrastructure engineer
Certificate Management experience & PKI in the cloud
Powershell
Middleware experience
Windows/IIS knowledge
3-5 years of info security technology
Cloud Security

What we offer

medical insurance
dental insurance
vision insurance
401(k) retirement plan
life insurance
long-term disability insurance
short-term disability insurance
paid parking/public transportation
(paid time, paid sick and safe time, hours of paid vacation time, weeks of paid parental leave, paid holidays annually - AS Applicable)

Pki engineer

Infrastructure engineer Powershell scripting Experience with Active Directory AD...

Location

United States , Charlotte, NC / Denver, CO

Salary:

75.00 - 80.00 USD / Hour

Collabera

Expiration Date

March 19, 2026

Requirements

Infrastructure engineer
Powershell scripting
Experience with Active Directory
ADCS or Active Directory Certificate Services
Middleware experience
Windows/IIS knowledge
3-5 years of info security technology
Cloud Security
Key life cycle management, understand and implement enterprise cryptography standards per industry standards

What we offer

medical insurance
dental insurance
vision insurance
401(k) retirement plan
life insurance
long-term disability insurance
short-term disability insurance
paid parking/public transportation
(paid time, paid sick and safe time, hours of paid vacation time, weeks of paid parental leave, paid holidays annually - AS Applicable)

Technical Lead, Host Assurance

OpenAI is seeking a Technical Lead, Host Assurance to own and scale the trust fo...

Location

United States , San Francisco; Seattle

Salary:

347000.00 - 385000.00 USD / Year

OpenAI

Expiration Date

Until further notice

Requirements

Have built and scaled deeply technical security or infrastructure teams in prior roles, with direct people-management responsibility
Have led senior engineers and earned credibility through hands-on technical leadership
Have deep experience with PKI, HSMs, machine identity, host attestation, secure boot, or hardware-rooted trust
Have built and operated security-critical infrastructure that sits on the critical path for large-scale production systems
Are comfortable owning low-level, high-impact systems where correctness, reliability, and scale matter deeply
Balance rigor with pragmatism, enabling teams to move quickly without compromising foundational trust
Earn trust through delivery — building, operating, and improving systems yourself when it matters most
Are energized by ambiguous problems, rapid growth, and building infrastructure that shapes the future

Job Responsibility

Own host assurance outcomes by defining and evolving the baseline security properties required for bare-metal hosts to be eligible for production use
Ensure hosts are verifiably trustworthy from delivery and installation through secure bootstrap and readiness to join orchestration systems
Design, implement, and operate the Host Assurance platform, including: HSM-backed services and key-management infrastructure, PKI and certificate-issuance systems that eliminate static credentials, and host identity, attestation, and measurement tooling
Validate delivered hardware and firmware against vendor claims and continuously detect and manage drift over time
Eliminate insecure bootstrap patterns while preserving deployment throughput and operational reliability
Partner with provisioning, fleet, and orchestration teams to deliver paved paths where the secure approach is the easiest approach
Set and uphold a high bar for reliability, resilience, and operational hygiene across foundational trust services
Lead incident response and post-incident learning when issues arise, driving systemic improvements that keep these systems dependable at scale
Lead, mentor, and directly manage a small team of senior engineers across PKI, operating systems, hardware security, and platform engineering
Hire and scale the Host Assurance function deliberately and proportionately as OpenAI’s compute footprint and platform ambitions grow

What we offer

Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
401(k) retirement plan with employer match
Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
Mental health and wellness support
Employer-paid basic life and disability coverage
Annual learning and development stipend to fuel your professional growth
Daily meals in our offices, and meal delivery credits as eligible

Fulltime

PKI Engineer

Collabera

Location:
United States , Charlotte, NC / Denver, CO

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Requirements:

Nice to have:

Additional Information:

Job Posted:
March 19, 2026

Expiration:
April 15, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for PKI Engineer

PKI Engineering Group Manager

Systems Engineer

Product Security Engineer

Senior Security Operations Engineer II

Senior Security Operations Engineer II

PKI Engineer

Pki engineer

Technical Lead, Host Assurance

PKI Engineer

Collabera

Location:United States , Charlotte, NC / Denver, CO

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Requirements:

Nice to have:

Additional Information:

Job Posted:March 19, 2026

Expiration:April 15, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for PKI Engineer

PKI Engineering Group Manager

Systems Engineer

Product Security Engineer

Senior Security Operations Engineer II

Senior Security Operations Engineer II

PKI Engineer

Pki engineer

Technical Lead, Host Assurance

Location:
United States , Charlotte, NC / Denver, CO

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
March 19, 2026

Expiration:
April 15, 2026