PUBLIC KEY INFRASTRUCTURE (PKI) & ENCRYPTION ENGINEER

Candidates must be able to be onsite on the first day of their assignment and follow the hybrid work model. The RTR also includes an acknowledgement of the hybrid work model.

Original Client Job Title: Engineer

Advertised Job Title: Public Key Infrastructure (PKI) & Encryption Engineer

American Airlines

Term: 6 - 12 Months

Location:  Fort Worth Texas 

Description:

Public Key Infrastructure (PKI) & Encryption Engineer

• Writes, tests, and documents technical work products (e.g., code, scripts, processes) according to organizational standards and practices
• Solves technical problems and builds components/libraries with far-ranging impact
• Delivers high quality work and coaches more junior engineers on technical craftsmanship
• Conducts root cause analysis to identify systemic problems and defines and leads execution of action items to address
• Designs thoughtfully integrated systems that model organizational best practices, allowing disparate teams across product domains to deliver value with speed, scale, and reliability
• Oversees the management of technical debt in existing systems and drives opportunities to eliminate within ongoing implementations
• Consistently anticipates scaling, latency, and durability challenges and guides teams in implementation of mitigating strategies
• Partners with the security organization to incorporate security conscious practices early in the lifecycle of new systems
• Thoughtfully evaluates technical risks and guides toward practical prevention strategies
• Consistently reflects on squad delivery practices throughout their span of of influence, recommends improvements to leadership and drives their implementation
• Maintains a focus on removing the duplication of effort across teams and proactively identifies opportunities for reuse within their span of influence
• Thoughtfully measures and assesses team and identifies areas of development for individuals
• Explores emerging technologies, leads development of prototypes with little or no guidance and incorporates into architectural solutions where appropriate
• PKI and X.509 certificate expertise (TLS/SSL, CA, issuance, renewal, revocation)
• Enterprise certificate lifecycle management experience (Keyfactor, Venafi, DigiCert, Sectigo, ADCS, etc.)
• Automation and scripting experience (PowerShell, Python, APIs)
• 3-5 years related experience

Nice to have:

• Keyfactor Command, EJBCA, Azure Key Vault, HashiCorp Vault, ACME, Azure/AWS, F5, NGINX, IIS, DevOps/IaC experience.