Lead PKI Security Engineer

Roles and Responsibilities Design, implement, and maintain enterprise PKI architectures, including multi-tier Certificate Authority (CA) environments. Manage certificate lifecycle processes, including issuance, renewal, revocation, and inventory management. Administer and support PKI components such as RAs, ADCS, and HSM platforms. Implement and maintain secure cryptographic practices aligned with enterprise security standards. Develop and enhance automation solutions using tools such as Ansible, Terraform, and PowerShell. Support PKI infrastructure deployments, upgrades, migrations, and operational improvements. Troubleshoot complex PKI, certificate, and cryptographic issues across enterprise environments. Collaborate with security, infrastructure, and application teams to implement secure certificate solutions. Ensure PKI services meet security, compliance, and operational requirements. Provide technical leadership, guidance, and best practices for PKI and cryptographic security. Required Qualifications Strong understanding of PKI concepts, certificate lifecycle management, and cryptographic principles. Extensive experience working with enterprise PKI environments, including multi-tier PKI architectures. Hands-on experience with certificate inventory management systems. Proven experience managing and supporting PKI technologies such as: Registration Authorities (RAs) Active Directory Certificate Services (ADCS) Hardware Security Modules (HSMs) Strong Information Security experience with a focus on PKI, cryptography, and certificate security. Experience with automation and infrastructure-as-code tools, including: Ansible Terraform PowerShell scripting Ability to analyze, troubleshoot, and resolve complex PKI and security-related issues. Preferred Qualifications Professional security certifications such as CompTIA Security+, CISSP, or equivalent. Experience with enterprise-scale PKI operations and security governance. Knowledge of certificate management best practices and security compliance frameworks. Experience leading PKI engineering initiatives and mentoring technical teams. Required Experience Proven experience as a PKI Engineer, Security Engineer, or similar role with enterprise PKI responsibilities. Experience supporting large-scale, security-focused infrastructure environments. Strong analytical, problem-solving, and communication skills.