Senior PKI Security Engineer

Role: Senior PKI Security Engineer

Location: Remote – Someone must live in EST or CST time zone

Basic Qualifications:

High School Diploma, GED, or equivalent certification

At least 4 years of Information Technology experience

At least 2 years of experience with Public Key Infrastructure (PKI)

Experience working with public Certificate Authorities, specifically Digicert and Sectigo

Preferred Qualifications:

Bachelor's degree in Computer Science, Information Systems, or Engineering

Knowledge of or hands-on experience with Digicert CertCentral

Understanding of the Information Technology Infrastructure Library (ITIL) principles

Experience leading technical teams or leading projects

AWS Certification

Experience in Python or other programming or scripting languages

3+ years of PKI Experience

Experience in PKI certificate and security technical experience that includes the operational support and implementation of large-scale, enterprise-level solutions

2+ years UNIX experience

Capital One is looking for a Senior PKI Security Engineer within the Cyber organization who will be responsible for providing operational, engineering, and project support for an enterprise PKI environment. The Senior PKI Security Engineer is considered the expert in the operations of PKI, Certificates, and Encryption and should have expert-level experience supporting large-scale and highly complex environments. This role will also require the ability to lead and coordinate efforts among the team. Individuals must be self-motivated and able to work well in a geographically dispersed, virtual team environment.

Primary Responsibilities:

Operations & Support

Manage the internal process for the issuance and lifecycle management of public Certificate Authority (CA) certificates.

Register and manage domains and associated validation processes.

Assist with troubleshooting, resolving complex or high-severity technical issues, and directly addressing customer questions.

Monitor the PKI and Certificate incident queue and resolve all levels of issues.

Create, review, approve, and implement changes to the PKI and Certificate environment.

Act as the PKI and Certificate lead for periodic disaster recovery exercises.

Engineering & Strategy

Analysis, design, and implementation of Public Key Infrastructure (PKI), certificate, and security solutions.

Analyze the current PKI and Certificate environment to identify both technical and operational challenges and develop solutions for improvement.

Analyze data and identify trends to facilitate root cause analysis and identify opportunities for service improvement.

Participate in capacity planning, performance monitoring, and maintenance to ensure high availability and proactively identify opportunities for service improvement.

Apply a strong understanding of DevOps principles to daily workflows and automation efforts.

Leadership & Collaboration

Act as a project lead or participate as a team member on projects involving PKI, certificates, and security.

Translate business needs into workable technology solutions that meet the needs of internal customers.

Represent the Crypto Services team on global incident management calls, interacting with other technical teams, customers, or vendors.

Effectively communicate technical issues and challenges to both technical and non-technical audiences.