PKI Engineer, Consultant

Accountabilities You will lead the architecture, operation, and continuous improvement of certificate services, ensuring secure key management and dependable certificate lifecycle processes across enterprise infrastructure. Your responsibilities will include:

• Design, implement, and operate certificate authorities, registration authorities, hardware security module (HSM) integrations, and certificate management services.

• Establish and maintain best practices for cryptographic key protection, access control, auditing, and recovery.

• Manage the complete certificate lifecycle, including enrollment, issuance, renewal, revocation, monitoring, and incident response.

• Develop automation to minimize manual certificate management tasks and prevent service outages caused by expired, invalid, or misconfigured certificates.

• Integrate PKI services with applications, devices, and workloads across on-premises environments and cloud platforms such as AWS and Azure.

• Define, implement, and maintain infrastructure as code for PKI services and their supporting cloud infrastructure.

• Troubleshoot certificate-related issues, including trust chain failures, TLS problems, and production service disruptions.

• Collaborate with security, platform, and application teams to make certificate management secure, scalable, and straightforward.

• Evaluate practical opportunities to use AI to improve operational workflows while ensuring appropriate security controls and human oversight.

• Document technical designs, operational procedures, and architecture decisions to support consistency and maintainability.

Requirements

The ideal candidate is a seasoned PKI and security infrastructure specialist with deep knowledge of certificate architecture, strong automation capabilities, and experience operating production environments. You should be comfortable working across cloud infrastructure and engineering teams while independently addressing complex technical challenges. Key qualifications include:

• 7+ years of experience in PKI engineering, certificate services, or security infrastructure engineering.

• Expert knowledge of certificate authority architecture, certificate profiles and policies, cryptographic key management, revocation mechanisms, and the X.509 certificate lifecycle.

• Hands-on experience operating production PKI services and troubleshooting certificates, trust chains, and TLS-related issues.

• Experience with AWS or Azure and integrating certificate services with cloud-based workloads.

• Strong automation and scripting skills using Python, PowerShell, or Go.

• Experience with infrastructure as code tools such as Terraform, Bicep, or CloudFormation.

• Familiarity with certificate enrollment and automation protocols, including ACME, SCEP, or EST.

• Strong understanding of secure infrastructure design, access management, and operational security practices.

• Ability to document technical architectures and designs clearly.

• Excellent collaboration and communication skills, with the ability to work effectively across security, platform, and application engineering teams.

• Must be legally authorized to work in the United States without requiring employment sponsorship. W2 employment eligibility is required; C2C arrangements are not accepted.

Benefits

• Hourly pay rate: $75–$80 USD.

• Contract duration: 12 months.

• Hybrid or remote working arrangements.

• Opportunity to contribute to security infrastructure within the healthcare technology sector.

• Work with modern cloud platforms, automation technologies, and enterprise PKI systems.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1