Pki Security Engineer

• Perform senior engineering responsibilities as part of a team and work with partners to architect and deploy PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and Hardware Security Modules (HSMs)
• Implement and maintain the issuance and management of digital certificates for users, servers, and devices across the organization
• Define certificate lifecycle management policies (issuance, renewal, revocation)
• Integrate PKI with other security systems like authentication and access control mechanisms
• Conduct regular security assessments and audits of PKI systems to identify vulnerabilities and potential risks
• Work with other IT teams to integrate PKI solutions into existing systems and applications
• Maintain close ties to various stakeholders, developers, and engineers across the company, ensuring the services we create meet their needs as products evolve
• Communicate extensively with Data Protection Product and engineering teams across the organization
• Drive complex technical initiatives to full delivery leveraging knowledge of Cyber security practices, software engineering principles, agile frameworks, and customer engagement
• Design, build, and maintain infrastructure to meet the organization’s requirements and ensure high availability
• Applying adept understanding and experience with systems automation platforms and technologies

• 5+ years of hands-on experience in network security, data security, and/or other cybersecurity-related controls and technologies
• Automation via Certificate Lifecycle Management tools using scripting and coding (Venafi, PowerShell, and Python knowledge required
• GitHub and .Net knowledge highly desired)
• Bachelor’s Degree in computer science or related field highly preferred
• Ability to foster collaborative, open, working relationships with technology groups and other stakeholders, including vendor relationships
• Clear communication skills and ability to interact effectively at multiple levels of an organization, and to influence leadership (Including translating technical information based on specific audiences)
• Experience implementing multiple high-visibility and high-impact enterprise cybersecurity projects with cross-functional teams while maintaining superior results including planning, development and management of technical requirements, design, testing and deployment of security solutions
• Strong understanding of Public Key Infrastructure (PKI) principles
• Expertise in PKI technologies like Microsoft Active Directory Certificate Services (AD CS), Entrust, Venafi, or other commercial PKI solutions
• Experience with managing Hardware Security Modules (HSMs)

Multiple certifications in cybersecurity and data protection cybersecurity highly preferred (CISSP, GIAC, CISM, CCSP, CISA, or Security+, or other related certifications)

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance
• Bonus or incentive opportunities