Public Key Infrastructure (PKI) Engineer

Public Key Infrastructure (PKI) Engineer

Contract Length: 6-12 months plus potential extension

Location: Dallas, TX (Hybrid)

Our client is seeking an experienced Public Key Infrastructure (PKI) Engineer to develop and implement processes for certificate authority (CA) management, platform authentication (Windows and Linux), and automation improvements within the PKI infrastructure. The role will focus on integrating security tools to enhance system performance, security, and auditability.

The ideal candidate will collaborate with cross-functional teams to ensure integration, automation, and compliance with best practices, contributing to the ongoing improvement of the client s security infrastructure. This team thrives in a fast-paced, results-driven environment. They value energy, collaboration, and a strong work ethic, offering a dynamic opportunity for long-term growth and success.

Qualifications:

• Bachelor s degree in Computer Science or equivalent field/experience
• 10+ years of experience in IT infrastructure roles with a focus on security, PKI, or related areas
• Strong understanding of cryptographic principles and technologies, including TLS, PGP, PKI, HSM, key management, and data protection methods
• Expertise in scripting and automation (Python, PowerShell, Bash)
• Experience with network and system security solutions, vulnerabilities, and remediation techniques
• Proficiency in working within an agile development environment (Scrum, Kanban)
• Excellent communication skills and ability to effectively collaborate with cross-functional teams
• Proven ability to manage complex projects with multiple stakeholders and competing priorities
• Strong problem-solving and analytical skills
• Experience with certificate management tools such as Venafi, Keyfactor, or similar certificate inventory and management systems
• Familiarity with Entrust Public Certificates and related processes
• Experience with infrastructure automation tools (e.g., Ansible, Puppet)
• Experience in managing enterprise server hardware (e.g., Dell, HP)
• Knowledge of identity management solutions (e.g., IBM TIM/TAM, Okta)
• Exposure to IoT devices and management platforms
• Experience with Red Hat technologies (e.g., IdM, Satellite, RHV, Ceph, etc.)
• Hands-on experience with AWS cloud services (EC2, S3, Lambda, RDS)
• Experience in designing, optimizing, and troubleshooting public cloud infrastructure
• Previous experience in technical architecture or solutions architecture roles is a plus

Key Responsibilities:

• Design, implement, and maintain processes for PKI, including certificate authority management, certificate lifecycle management, and platform authentication (Windows and Linux)
• Automate the management of cryptographic systems and ensure auditability and compliance across various platforms
• Work in collaboration with security and infrastructure teams to integrate tools and optimize PKI management processes
• Evaluate and improve data protection technologies, including encryption, key management, and data masking/tokenization solutions
• Troubleshoot and remediate security vulnerabilities, including conducting penetration testing as needed
• Develop and enhance automation scripts (Python, PowerShell, Bash) to streamline PKI-related tasks
• Implement and manage encryption technologies such as TLS, PGP, PKI, and HSM (Hardware Security Modules)
• Collaborate with internal stakeholders to gather requirements, prioritize tasks, and deliver secure, high-quality solutions
• Continuously monitor and optimize the infrastructure to ensure high availability, security, and compliance with industry standards

Genius Road, LLC is proud to be a Certified Women s Business Enterprise, an Equal Opportunity Employer and values diversity. All employment is decided on the basis of qualifications, merit and business need.