PKI Engineer

PKI Engineer – $75/hour | Fully Remote | Contract

We’re looking for a PKI Engineer to join our Key Management team and help design, build, and automate modern PKI solutions that strengthen enterprise security and improve user experience.

In this role, you’ll work closely with leadership and technology teams to develop an advanced PKI capability from the ground up, including design, implementation, and automation of certificate lifecycle management. The ideal candidate brings deep PKI expertise, strong analytical skills, and a passion for secure, scalable infrastructure.

• Design, configure, and implement enterprise PKI systems.
• Manage SSL/TLS certificates, keys, and lifecycle processes.
• Support digital signature and encryption needs (x.509 certificates).
• Integrate certificates with enterprise systems (VPN, LDAP, web servers, SAP, etc.).
• Provide guidance on PKI best practices, standards, and security compliance.
• Troubleshoot and resolve complex PKI issues across environments.
• Develop automation scripts and service patterns for application integration.
• Collaborate with cross-functional teams on security and risk mitigation initiatives.

• Proven experience designing and managing PKI solutions and certificate lifecycle tools.
• Strong understanding of SSL, SSH, and cryptographic protocols.
• Hands-on experience with Microsoft Certificate Services and Active Directory.
• Familiarity with Hardware Security Modules (HSMs) and certificate authorities.
• Working knowledge of ITIL processes for incident and problem management.
• Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience).