Sr. Security Engineer

Atlanta, GA

Instant Apply

1 day ago

Job Description

Sr. Security Engineer
Contract/ Contract to hire
Atlanta, GA

Job Summary
We are seeking an experienced PKI Engineer to design, implement, operate, maintain, and enhance enterprise Public Key Infrastructure (PKI) and certificate management services.
The ideal candidate will have strong experience in cybersecurity engineering, certificate lifecycle management, encryption technologies, security automation, and enterprise infrastructure security.
This role is responsible for ensuring secure authentication, encryption, certificate availability, regulatory compliance, and operational stability across enterprise systems. The PKI Engineer will collaborate with application, infrastructure, and security teams to identify vulnerabilities, implement security solutions, and strengthen the organization's security posture.

Key Responsibilities:
PKI Infrastructure Management

Design, implement, maintain, and enhance enterprise PKI infrastructure and certificate management services.
Ensure the availability, reliability, resiliency, and patching of PKI systems.
Manage certificate issuance, renewal, revocation, expiration, and overall lifecycle management.
Support large-scale certificate environments across enterprise applications, infrastructure, and cloud platforms.
Ensure timely certificate renewal and replacement to prevent service disruptions.
Manage trust stores, certificate chains, and certificate integrity.
Support PKI architecture modernization and improvements in scalability and resilience.

Certificate Automation and Integration

Design, develop, and implement automation solutions for certificate lifecycle management.
Integrate PKI services with CI/CD pipelines, cloud services, enterprise applications, and infrastructure platforms.
Deploy and maintain PKI automation tools, connectors, APIs, and scripting solutions.
Collaborate with application and infrastructure teams to streamline certificate provisioning and renewal.
Assist teams with onboarding to PKI services and automation platforms.
Improve certificate monitoring, visibility, reporting, and compliance tracking.

Information Security and Risk Management

Design, test, implement, and support security systems and technologies to safeguard enterprise information assets.
Perform vulnerability assessments, risk analyses, security testing, and infrastructure security evaluations.
Identify and remediate security vulnerabilities, certificate misconfigurations, trust failures, and expiration risks.
Implement and maintain firewalls, intrusion detection systems, encryption solutions, and other security controls.
Investigate security incidents, conduct forensic analysis, and support incident response and recovery activities.
Develop security controls, access management procedures, and authentication and authorization solutions.
Collaborate with technical teams to restore systems and recover data following security incidents.
Develop and maintain security monitoring and alerting mechanisms.

Security Policies and Compliance

Define, implement, and maintain enterprise security policies, standards, and procedures.
Establish standards for certificate issuance, validity periods, cryptographic usage, and key management.
Ensure compliance with applicable regulatory and industry frameworks, including NIST, CMMC, PCI-DSS, and TSA directives.
Perform security assessments and evaluate compliance with organizational security requirements.
Recommend improvements to security controls, infrastructure, and risk mitigation strategies.
Evaluate emerging security technologies and cryptographic standards, including post-quantum cryptography.

Disaster Recovery and Security Operations

Develop, test, and support disaster recovery and business continuity plans.
Maintain security procedures for backups, data protection, and incident recovery.
Monitor security systems and respond to threats and vulnerabilities throughout the project lifecycle.
Support incident response involving PKI, certificate failures, encryption issues, and authentication problems.
Prepare technical documentation, security assessment reports, and incident investigation findings.
Evaluate security tools and recommend technology enhancements based on organizational requirements.

Collaboration and Security Awareness

Work closely with cybersecurity, application development, infrastructure, and management teams.
Provide technical guidance on PKI technologies, certificate automation, and security best practices.
Communicate security incidents, vulnerabilities, and remediation plans to appropriate stakeholders.
Conduct security awareness training and provide technical support to internal teams.
Maintain knowledge of industry trends, emerging threats, security technologies, and regulatory requirements.

Required Qualifications:

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
3–7+ years of experience in PKI engineering, cybersecurity engineering, or infrastructure security.
Hands-on experience with enterprise Public Key Infrastructure (PKI) and certificate lifecycle management.
Experience with PKI platforms and tools such as:
- Venafi
- DigiCert
- Microsoft Certificate Authority (Microsoft CA)
- AWS Certificate Manager (AWS ACM)
Strong understanding of TLS/SSL protocols, cryptographic principles, digital certificates, and key management.
Experience with Hardware Security Modules (HSMs) and cryptographic key custody operations.
Hands-on experience with PKI automation using APIs, scripting, and CI/CD pipelines.
Experience with cloud certificate management services in AWS and Azure.
Knowledge of security and regulatory frameworks, including NIST, PCI-DSS, and CMMC.
Experience managing and scaling PKI infrastructure in large enterprise environments.
Familiarity with trust store management and certificate chain validation across distributed systems.
Understanding of authentication, authorization, encryption, vulnerability management, and security controls.
Strong troubleshooting, analytical, documentation, and communication skills.

Preferred Qualifications

Experience implementing enterprise-wide certificate automation solutions.
Knowledge of post-quantum cryptography and emerging cryptographic standards.
Experience integrating PKI services into cloud-native and DevOps environments.
Familiarity with security incident response, disaster recovery, and compliance assessments.
Experience improving PKI scalability, monitoring, operational efficiency, and resilience.

Key Technical Skills:
PKI & Certificate Management: PKI, Certificate Lifecycle Management, Digital Certificates, TLS/SSL, X.509, Certificate Authorities, Trust Stores
PKI Tools: Venafi, DigiCert, Microsoft CA, AWS ACM
Security & Cryptography: HSM, Encryption, Key Management, Authentication, Authorization, Cryptographic Standards
Automation & Cloud: APIs, Scripting, CI/CD Pipelines, AWS, Azure, Certificate Automation
Compliance & Risk: NIST, PCI-DSS, CMMC, Vulnerability Assessment, Security Risk Management
Additional Skills: Incident Response, Disaster Recovery, Security Monitoring, Enterprise Infrastructure Security

“All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.”

Numbers & Facts

Location

Atlanta, GA

Skills

Access Controlunmatched
Accreditation Standardsunmatched
Amazon Web Services (AWS)unmatched
Analysis Skillsunmatched
Application Programming Interface (API)unmatched
Authenticationunmatched
Automationunmatched
Best Practicesunmatched
Business Continuity Planning (BCP)unmatched
Certificate Authoritiesunmatched
Certificate Issuanceunmatched
Cloud Computingunmatched
Communication Skillsunmatched
Computer Scienceunmatched
Computer Securityunmatched
Continuous Deployment/Deliveryunmatched
Continuous Integrationunmatched
Cryptographic Protocolsunmatched
Cryptographyunmatched
Data Recoveryunmatched
Database Backupunmatched
DevOpsunmatched
Digital Certificatesunmatched
Disaster Recoveryunmatched
Distributed Computingunmatched
Documentationunmatched
Emerging Technologyunmatched
Enterprise Applicationsunmatched
Enterprise Protectionunmatched
Firewallsunmatched
Forensic Scienceunmatched
Identify Issuesunmatched
Incident Responseunmatched
Industry/Trade Analysisunmatched
Information Assetsunmatched
Information Technology & Information Systemsunmatched
Information/Data Security (InfoSec)unmatched
Internet Securityunmatched
Intrusion Detection Systemsunmatched
Investigative Reportsunmatched
Maintain Complianceunmatched
Microsoft Certificationsunmatched
Microsoft Product Familyunmatched
Microsoft Windows Azureunmatched
Onboardingunmatched
Operational Strategyunmatched
PCI-DSSunmatched
Project Lifecycleunmatched
Public Key Infrastructure (PKI)unmatched
Regulationsunmatched
Regulatory Complianceunmatched
Regulatory Requirementsunmatched
Retail Managementunmatched
Riskunmatched
Risk Analysisunmatched
Risk Managementunmatched
SSL-TLS (Secure Socket Layer - Transport Layer Security)unmatched
Scripting (Scripting Languages)unmatched
Security Analysisunmatched
Security Complianceunmatched
Security Infrastructureunmatched
Security Monitoringunmatched
Software Developmentunmatched
Software Patchesunmatched
Technical Leadershipunmatched
Technical Supportunmatched
Technical Writingunmatched
Test Designunmatched
Test Plan/Scheduleunmatched
Testingunmatched
Time Managementunmatched
Training/Teachingunmatched
Trend Analysisunmatched
U.S. National Institute of Standards and Technology (NIST)unmatched
X.509 Digital Certificateunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder