Senior Public Key Infrastructure Engineer

Pay Range: $61.00hr - $66.00hr

Job Overview:

The Public Key Infrastructure (PKI) Engineer will be responsible for ensuring the processes and controls are developed and implemented around the core Certificate Authority (CA) Management, Active Directory, and platform authentication across Windows and Unix. The role involves developing and integrating various tools to better automate and manage the Public Key Infrastructure while ensuring auditability for system management. The successful candidate will work cross-functionally with Security and Infrastructure teams to ensure full integration and automation.

Required Skills and Experience:

• Experience working within an agile development methodology such as Kanban or Scrum.
• Hands-on experience with Certificate Life Cycle Management Tool Venafi.
• In-depth knowledge of managing keys and RBAC via the Venafi System.
• Well versed with integration and enrollment via defined workflows.
• Responsible for providing manual and automated reports through the Venafi system.
• Experience with continuous delivery and deployment.
• Experience assessing data protection approaches, requirements, and activities.
• Knowledge of Certification Authorities, Two-Factor Authentication, MFA, LDAP Directories, OCSP, ICAM, and the standards relating to them.
• Understanding of cryptography, key management, masking, tokenization, or other data protection technologies.
• Experience utilizing and deploying encryption technologies such as TLS, PGP, PKI, and HSM.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing methods, principles, and concepts.
• An understanding of SSH, especially the configuration and use of SSH keys for authentication.
• Experience with high-level script languages such as Python, along with shell scripting in KSH, Bash, and PowerShell.
• Knowledge and experience of network and system security solutions, concepts, and technologies.
• Experience with distributed platforms such as Linux, with Windows server experience being a plus.
• Strong verbal and written communication skills with comfort working across all levels in the organization.
• Effective at both collaboration and negotiation with internal stakeholders.
• Capable of managing and prioritizing multiple projects with competing resource requirements and timelines.
• 10+ years of experience working in an IT Infrastructure related role along with associated design experience.

Preferred:

• Demonstrated experience with server configuration management and infrastructure automation tools such as Ansible or Puppet.
• Experience supporting enterprise server hardware including Dell or HP.
• Experience with Identity Management solutions such as IBM TIM/TAM.
• Experience with IoT devices and management is a plus.
• Design and implement solutions for integration within client environments for various Red Hat products such as IdM (Identity Management), Satellite, RHV (Red Hat Virtualization), RHDS (Red Hat Directory Server), and Ceph.
• AWS Cloud experience including core services such as EC2, S3, ALB/NLB, Lambda, and RDS.
• Experience designing, optimizing, and troubleshooting public cloud platforms associated with large, complex application stacks.
• 3+ years of experience working in a PKI environment, with AWS public cloud environment experience being a plus.
• AWS hands-on experience designing and managing AWS cloud solutions.
• Previous experience working as a Technical Architect, Solutions Architect, Technical Design Authority, or Solutions Designer is preferred.