Sr. Security Engineer

Join a high-impact security engineering team supporting enterprise certificate and cryptographic services in a fast-paced, collaborative environment. This role focuses on strengthening PKI infrastructure, improving certificate lifecycle automation, and helping ensure secure, reliable operations across applications and platforms.
Responsibilities

• Support the daily operation, availability, resiliency, and patching of PKI infrastructure
• Manage certificate issuance, renewal, revocation, and overall lifecycle processes
• Oversee certificate inventories across applications and infrastructure to reduce expiration and trust-related risks
• Build and enhance automation for certificate management using APIs, pipelines, scripting, and related tooling
• Integrate PKI capabilities with enterprise systems, including CI/CD workflows, cloud services, and application platforms
• Help establish and enforce standards for certificate usage, cryptography, and related security policies
• Partner with cross-functional teams to enable PKI onboarding, tooling adoption, and clear ownership practices
• Assist with incident response and remediation efforts related to certificates, encryption, and trust chain issues
• Support reporting, visibility, and compliance efforts tied to certificate health and security controls
• Contribute to modernization initiatives and evaluation of emerging cryptographic approaches and tools

Skills

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent experience
• 3-7+ years of experience in PKI, cybersecurity engineering, or infrastructure security
• Hands-on experience with certificate lifecycle management
• Working knowledge of PKI platforms and tools such as Venafi, DigiCert, Microsoft CA, or AWS ACM
• Solid understanding of TLS/SSL, cryptographic principles, and key management practices
• Ability to work collaboratively across teams and communicate technical concepts clearly
• Strong attention to detail and commitment to secure, reliable operations

Preferred Skills

• Experience with HSMs and key custody operations
• Background in PKI automation through scripting, APIs, or pipeline-based workflows
• Experience with cloud certificate services such as AWS or Azure
• Knowledge of compliance frameworks such as NIST, PCI-DSS, or CMMC
• Experience supporting PKI at scale in large enterprise environments
• Familiarity with trust store management across distributed systems

Horizontal is committed to fostering an inclusive, equitable, and respectful workplace where different perspectives are valued and everyone has the opportunity to contribute and succeed. We welcome applicants from all backgrounds and encourage candidates who bring a variety of experiences, skills, and viewpoints to apply.

By applying for this position, you acknowledge and agree that Horizontal Talent may contact you regarding your application using automated technology, including phone calls, SMS/text messages, or email, which may be delivered by our virtual AI recruiter, Alex.