PKI Engineer

Job Title:PKI Engineer
Location: Remote

Job Description:

• Implement and manage encryption for data at rest and data in transit across AWS, Azure, and Google Cloud Platform
• Design, deploy, and maintain PKI, certificates, keys, and certificate lifecycle management.
• Configure cloud-native key management services, including AWS KMS/CloudHSM, Azure Key Vault/Managed HSM, and Google Cloud KMS/HSM.
• Integrate encryption, certificates, and cryptographic controls into applications, APIs, databases, storage, and cloud services.
• Implement and support TLS/mTLS, certificate issuance, rotation, renewal, and revocation.
• Work with application, cloud, security, and infrastructure teams to implement cryptographic requirements.
• Troubleshoot encryption, certificate, key management, and PKI-related issues.
• Document architectures, configurations, operational procedures, and key-management processes.
• Hands-on engineering experience with AWS, Azure, and/or Google Cloud Platform.
• Practical experience with PKI, TLS, encryption, certificates, and key management.
• Experience implementing encryption for applications, databases, storage, APIs, and cloud workloads.
• Familiarity with HSMs, secrets management, key rotation, and certificate lifecycle management.
• Experience with automation tools such as Terraform, scripting, CI/CD, or infrastructure-as-code.
• Understanding of security best practices for protecting cryptographic keys and sensitive data