Why this role stands out
This hybrid Lead PKI Engineer role offers a fantastic opportunity to shape critical security infrastructure and advance your expertise in a reputable organization. You will thrive here if you are a proactive security professional with a strong background in PKI systems and automation, eager to contribute to robust certificate lifecycle management. Apply now to join a dynamic team and make a significant impact.
Quick overview
Job description
Position Summary
The organization is seeking a skilled Lead PKI Security Engineer to support and maintain its Public Key Infrastructure (PKI) systems. This role involves managing certificate lifecycle processes, implementing security policies, and troubleshooting PKI-related issues to ensure the seamless and secure operation of digital certificates within the environment.
Key Responsibilities
- Support the lifecycle management of certificates within the environment, including the Certificate Lifecycle Management (CLM) process.
- Maintain and update the organization's PKI systems.
- Develop and enforce security policies related to key management and encryption standards.
- Support and troubleshoot PKI systems, assisting with certificate issues to maintain operational integrity.
- Configure certificate authorities, create templates, and troubleshoot TLS handshake issues as needed.
- Utilize PKI tools such as Registration Authorities (RAs), Enrollment Services (ADCS), and Hardware Security Modules (HSMs).
- Automate certificate management tasks using tools like Ansible, Terraform, and PowerShell.
- Diagnose and resolve complex PKI-related technical issues.
- Manage and automate certificate lifecycle processes with precision.
- Quickly adapt to new technologies and evolving technical environments.
Required Qualifications
- Minimum of 6 years of relevant experience in PKI or information security.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Strong understanding of PKI concepts and certificate inventory management systems.
- Experience working with RAs, ADCS, HSMs, and automation tools such as Ansible, Terraform, and PowerShell.
- Certifications like CompTIA Security+, CISSP, or similar are highly beneficial.
- Strong communication skills and a proactive approach to learning.
- Demonstrated experience in multi-tier PKI and cryptography environments.
- Proven ability to configure certificate authorities and troubleshoot certificate issues (e.g., TLS handshakes).
- Analytical skills to diagnose and resolve PKI and credential-related technical problems.
- Meticulous approach to managing certificate processes and automation.
Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support.
Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals. To learn more, please visit .
Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.
Similar jobs
- DS

Principal Embedded Software Security Engineer -S3ERecently posted
Disability Solutions · Albuquerque, NM · Hybrid 🇺🇸
ScrumC++Kanban+4Technology$107.5k - $204.5k/yr - RA

Embedded Software Security Engineer II (S3E)Recently posted
Raytheon · Tucson, Arizona · Hybrid 🇺🇸
C++KanbanPerl+3Technology$68.9k - $131.1k/yr - RA

Cybersecurity & Information Assurance Specialist — Federal Health ITRecently posted Auto Apply
Rackner · Remote — United States · Remote 🇺🇸
ComplianceRisk ManagementIAMTechnologySalary not listed - AN

Research Engineer, Cybersecurity RL (Reinforcement Learning)Recently posted Auto Apply
Anthropic · San Francisco · Hybrid 🇺🇸
ConcreteGPTLLM+2Technology$1 - $2/yr - DS

Embedded Security Software Engineer II (Onsite)Recently posted
Disability Solutions · Houston, TX · Hybrid 🇺🇸
GitScrumC+++5Technology$68.9k - $131.1k/yr - EG
Cybersecurity Assurance Analyst Auto Apply
Enstar Group · Work from Home(US) · Hybrid 🇺🇸
EncryptionTCP/IPDNS+6Technology$113k - $160k/yr - RE
Security Engineer (Research Infrastructure)Recently posted Auto Apply
Resolution · Berkeley · Hybrid 🇺🇸
GCPGitAWS+5Technology$346k/yr - RE
Security Engineer (Corporate IT)Recently posted Auto Apply
Resolution · Berkeley · Hybrid 🇺🇸
SOC 2CI/CDIAMTechnology$346k/yr - RA

Principal Embedded Software Security Engineer -S3ERecently posted
Raytheon · Albuquerque, NM · Hybrid 🇺🇸
ScrumC++Kanban+4Technology$107.5k - $204.5k/yr - RA

Embedded Security Software Engineer II (Onsite)Recently posted
Raytheon · Houston, TX · Hybrid 🇺🇸
GitScrumC+++5Technology$68.9k - $131.1k/yr - SE
Security GSOC AnalystRecently posted
Securitas · Redwood City, CA · Hybrid 🇺🇸
Project ManagementAdministrativeSalary not listed - MS

Intern - Security AnalystRecently posted
Midland States Bank · Saint Louis, Missouri · Hybrid 🇺🇸
Microsoft ExcelMicrosoft OfficeMicrosoft PowerPointTechnology$18/hr
