Sr. Security Engineer

YOUR RESPONSIBILITIES IN THIS ROLE:
1. PKI Infrastructure & Operations
Ensure availability, resiliency, and patching of PKI infrastructure
Support certificate issuance, renewal, revocation, and lifecycle management
2. Certificate Lifecycle Management
Manage large-scale certificate environments across applications and infrastructure
Ensure timely renewal and replacement of certificates
Support trust store management and certificate chain integrity
3. Automation & Integration
Build and implement automation for certificate lifecycle management
Tanesha Magby
Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications)
Deploy and operationalize tools such as connectors and automation pipelines
4. Governance, Standards & Policy Enforcement
Enforce security policies related to certificate usage and cryptography
Define and maintain standards for certificate issuance, validity, and usage
Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives)
5. Cross-Team Collaboration
Partner with application and infrastructure teams to enable certificate automation
Provide guidance and supporting tooling while ensuring clear ownership boundaries
Assist teams with onboarding to PKI services and automation
6. Risk Reduction & Incident Support
Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures
Support incident response involving certificate or encryption issues
Improve visibility and reporting for certificate health and compliance
7. Emerging Crypto & Future Readiness
Support adoption of new cryptographic standards (e.g., post-quantum cryptography)
Assist in modernization of PKI architecture and tooling
Evaluate new solutions for scalability and resilience

Quals--
****THIS IS A CRITICAL NEED****

Must be able to hit the ground running.

WHAT YOU NEED TO SUCCEED (MINIMUM QUALIFICATIONS)
Bachelors degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
37+ years in PKI, cybersecurity engineering, or infrastructure security
Hands-on experience with certificate lifecycle management
Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM)
Understanding of TLS/SSL, cryptographic principles, and key management
Consistently prioritizes safety and security of self, others, and personal data.
Embraces diverse people, thinking, and styles.
Possesses a high school diploma, GED, or high school equivalency.
Is at least 18 years of age and has authorization to work in the United States.
WHAT WILL GIVE YOU A COMPETITIVE EDGE (PREFERRED QUALIFICATIONS)
Experience with:
HSMs and key custody operations
PKI automation (APIs, pipelines, scripting)
Cloud certificate services (AWS, Azure)
Knowledge of compliance frameworks (NIST, PCI-DSS, CMMC)
Experience scaling PKI in large enterprise environments
Familiarity with trust store management across distributed systems

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. NLB is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, contact HR department by sending an e-mail to notifications@nlbservices.com.