PKI Security Engineer (AWS & Cybersecurity)

Request ID: 100954-1
Title: PKI Security Engineer (AWS & Cybersecurity)
Locations: Atlanta, GA
Duration: 06+ Months with Possible Extension.
Pay Range: $62-68/Hour on W2/C2C (All inclusive)

We are seeking a Senior PKI Security Engineer with deep expertise in Public Key Infrastructure (PKI), AWS security services, and enterprise certificate lifecycle management. The ideal candidate will design, implement, administer, and support secure PKI environments while driving automation, cloud security, and compliance initiatives.

This role requires hands-on experience with AWS PKI services, Client PKI, Venafi integration, IBM Mainframe encryption technologies, certificate authority (CA) management, HSMs, and scripting for automation. The engineer will collaborate with cross-functional teams to strengthen enterprise security architecture and ensure compliance with industry and regulatory standards.

---

Key Responsibilities

• Design, implement, administer, and maintain enterprise Public Key Infrastructure (PKI).
• Develop and execute PKI strategies aligned with business objectives and security policies.
• Manage certificate lifecycle, including issuance, renewal, revocation, and automation.
• Configure and support Certificate Authorities (CA) in compliance with Federal PKI (FPKI) standards.
• Design and implement AWS-based PKI solutions using:
  • AWS KMS
  • AWS CloudHSM
  • AWS Certificate Manager (ACM)
  • AWS Secrets Manager
  • AWS CloudTrail
  • Amazon CloudFront
• Integrate Venafi with Client PKI and public Certificate Authorities.
• Develop automation scripts using PowerShell, Python, YAML, JSON, and Batch scripting.
• Support PKI-enabled applications, web servers, and secure communication protocols including SSL/TLS, HTTPS, and LDAPs.
• Design and implement Hardware Security Module (HSM) solutions.
• Support IBM Mainframe encryption technologies including:
  • TKE
  • UKO
  • SGKLM
• Review, troubleshoot, patch, and enhance Red Hat Certificate System components.
• Perform PKI troubleshooting and root cause analysis.
• Conduct technical research and recommend cloud security best practices.
• Implement identity management, authentication, authorization, and certificate governance solutions.
• Support IT contingency planning and disaster recovery initiatives.
• Collaborate with infrastructure, security, and application teams to implement secure enterprise solutions.
• Maintain compliance with cybersecurity standards and regulatory requirements.

---

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, or a related field.
• 8 10+ years of experience in Cyber Security and PKI Engineering.
• Strong experience designing and managing enterprise PKI environments.
• Hands-on experience with AWS security services including:
  • AWS KMS
  • CloudHSM
  • AWS Certificate Manager (ACM)
  • Secrets Manager
  • CloudTrail
  • CloudFront
• Experience with Client PKI technologies.
• Strong knowledge of:
  • Certificate Authorities (CA)
  • SSL/TLS
  • HTTPS
  • LDAPs
  • X.509 Certificates
• Experience with Venafi certificate lifecycle management.
• Strong scripting skills using:
  • PowerShell
  • Python
  • JSON
  • YAML
  • Batch
• Experience with Hardware Security Modules (HSM).
• Experience with Linux and Windows Server administration.
• Experience supporting Red Hat Certificate System.
• Experience with OSI Layer 2 7 security concepts.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent verbal and written communication skills.

---

Preferred Qualifications

• Experience with IBM Mainframe encryption technologies:
  • TKE
  • UKO
  • SGKLM
• Experience with Identity and Access Management (IAM).
• Knowledge of:
  • Authentication
  • Authorization
  • Identity Governance
  • HSPD-12 compliance
• Experience with Agile development methodologies.
• Experience developing IT Contingency Plans.
• Cloud security architecture experience.
• Experience in DevOps automation.

---

Preferred Certifications

• CISSP
• CISM
• AWS Certified Security Specialty
• AWS Certified Solutions Architect
• AWS Certified SysOps Administrator
• AWS Certified DevOps Engineer
• Other Cyber Security certifications

---

Required Technical Skills

• Public Key Infrastructure (PKI)
• AWS Security
• AWS KMS
• AWS CloudHSM
• AWS Certificate Manager (ACM)
• AWS Secrets Manager
• AWS CloudTrail
• Amazon CloudFront
• Client PKI
• Venafi
• Certificate Authority (CA)
• Certificate Lifecycle Management
• SSL/TLS
• HTTPS
• LDAP
• HSM
• PowerShell
• Python
• YAML
• JSON
• Batch Scripting
• Windows Server
• Linux
• Red Hat Certificate System
• Cyber Security
• DevOps Automation

---

Nice-to-Have Skills

• IBM Mainframe Security
• TKE
• UKO
• SGKLM
• Identity Management
• IAM
• FPKI Compliance
• HSPD-12
• Cloud Security Architecture
• Disaster Recovery
• IT Contingency Planning
• Agile

Company Benefits & Culture

• Inclusive and diverse work environment
• Opportunities for professional growth and development
• Comprehensive health and wellness benefits

Appreciate your quick response and please feel free to reach me out for any query you may have.

Thanks