Sr. Security Engineer

Job Title: Sr. Security Engineer

Location: Atlanta, GA (Onsite)

Duration: 12+ Months

WHAT YOU NEED TO SUCCEED (MINIMUM QUALIFICATIONS)

• Bachelor s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
• 3 7+ years in PKI, cybersecurity engineering, or infrastructure security
• Hands-on experience with certificate lifecycle management
• Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM)
• Understanding of TLS/SSL, cryptographic principles, and key management
• Consistently prioritizes safety and security of self, others, and personal data.
• Embraces diverse people, thinking, and styles.
• Possesses a high school diploma, GED, or high school equivalency.
• Is at least 18 years of age and has authorization to work in the United States.

WHAT WILL GIVE YOU A COMPETITIVE EDGE (PREFERRED QUALIFICATIONS)

Experience with:

• HSMs and key custody operations
• PKI automation (APIs, pipelines, scripting)
• Cloud certificate services (AWS, Azure)
• Knowledge of compliance frameworks (NIST, PCI-DSS, CMMC)
• Experience scaling PKI in large enterprise environments
• Familiarity with trust store management across distributed systems

YOUR RESPONSIBILITIES IN THIS ROLE:

1. PKI Infrastructure & Operations

• Ensure availability, resiliency, and patching of PKI infrastructure
• Support certificate issuance, renewal, revocation, and lifecycle management

2. Certificate Lifecycle Management

• Manage large-scale certificate environments across applications and infrastructure
• Ensure timely renewal and replacement of certificates
• Support trust store management and certificate chain integrity

3. Automation & Integration

• Build and implement automation for certificate lifecycle management
• Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications)
• Deploy and operationalize tools such as connectors and automation pipelines

4. Governance, Standards & Policy Enforcement

• Enforce security policies related to certificate usage and cryptography
• Define and maintain standards for certificate issuance, validity, and usage
• Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives)

5. Cross-Team Collaboration

• Partner with application and infrastructure teams to enable certificate automation
• Provide guidance and supporting tooling while ensuring clear ownership boundaries
• Assist teams with onboarding to PKI services and automation

6. Risk Reduction & Incident Support

• Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures
• Support incident response involving certificate or encryption issues
• Improve visibility and reporting for certificate health and compliance

7. Emerging Crypto & Future Readiness

• Support adoption of new cryptographic standards (e.g., post-quantum cryptography)
• Assist in modernization of PKI architecture and tooling
• Evaluate new solutions for scalability and resilience