Senior PKI / Cryptographic Engineer

Senior PKI / Cryptographic Engineer (W2 only role)

Job Description

We are seeking a Senior PKI / Cryptographic Engineer to manage and enhance enterprise certificate management, cryptographic platforms, secrets management, and automation solutions. This role will focus on PKI architecture, security hardening, infrastructure automation, and supporting Directory Services engineering initiatives.

Key Responsibilities

\n
• Lead optimization, integration, and automation of certificate and cryptographic platforms.
\n
• Design and implement security controls, system hardening, monitoring, patching, and risk mitigation.
\n
• Serve as an escalation point for Directory Services administrators, resolving complex issues and automating operational tasks.
\n
• Develop engineering roadmaps and manage project priorities, timelines, and deliverables.
\n
• Support technology pilots, POCs, and cross-functional engineering initiatives.
\n

Required Skills & Qualifications

\n
• 10 years of experience managing certificate and cryptographic platforms.
\n
• Strong expertise in PKI, certificate lifecycle management, and architecture.
\n
• 5+ years of Directory Services / DevOps engineering experience, including secrets management automation.
\n
• Strong PowerShell scripting and automation skills.
\n
• Experience with HSM deployment, management, and troubleshooting.
\n
• Cloud experience with GCP, Azure (Azure Key Vault), or AWS.
\n
• Experience with Infrastructure as Code (IaC), CI/CD pipelines, and API integrations.
\n
• 5+ years working with cross-functional technical and project teams.
\n
• Understanding of incident, problem, request, and change management.
\n
• Keyfactor certificate management platform.
\n
• CyberArk and HashiCorp Vault.
\n
• Enterprise secrets management and certificate automation.
\n