About this role:

In this role, you will:

• • Lead the design, engineering, automation, and operation of enterprise PKI and certificate lifecycle management services.
  • Design, document, test, maintain, and improve highly scalable security solutions related to cryptography, authentication, machine identity, and certificate management.
  • Develop automation that streamlines certificate issuance, renewal, discovery, inventory, compliance monitoring, and lifecycle management.
  • Engineer integrations between certificate management platforms and enterprise applications using APIs and automation frameworks.
  • Design and support standards-based certificate enrollment and lifecycle solutions using technologies such as ACME, EST, and SCEP.
  • Contribute to cryptographic modernization initiatives including crypto-agility and post-quantum cryptography (PQC) readiness.
  • Evaluate and implement emerging machine identity and workload identity technologies such as SPIFFE/SPIRE and related industry standards.
  • Develop reusable automation, tooling, and self-service capabilities using source control and modern software engineering practices.
  • Identify security risks, vulnerabilities, and control gaps and recommend remediation strategies.
  • Collaborate with application teams, infrastructure teams, architects, and security partners to drive adoption of certificate management and machine identity services.
  • Provide technical leadership and mentorship across PKI and certificate management initiatives.
  • Collaborate and influence all levels of professionals including managers.

Required Qualifications:

• 7+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 1+ years of experience providing production support
• 1+ years of experience using ticket tracking tools for change management, problem and incident management, and availability management

Desired Qualifications:

• • hands-on experience designing, implementing, or operating enterprise PKI and certificate lifecycle management solutions.
  • experience supporting certificate use cases including TLS, machine identities, code signing, S/MIME, SSH, and workload identities.
  • Strong understanding of PKI concepts including Certificate Authorities (CA), Registration Authorities (RA), certificate enrollment, revocation, OCSP, CRL, key management, and cryptographic trust models.
  • experience with one or more certificate management platforms such as Venafi, DigiCert, Microsoft ADCS, Keyfactor, or comparable solutions.
  • Experience with certificate enrollment and lifecycle protocols such as ACME, EST, and SCEP.
  • Experience developing automation using Python, PowerShell, Ansible, Terraform, or similar technologies.
  • Experience developing and consuming REST APIs to automate integrations and workflows.
  • Experience using Git-based development workflows including source control, pull requests, code reviews, testing, and CI/CD pipelines.
  • Experience with modern software engineering practices including automation, Infrastructure as Code (IaC), and platform integration.
  • Knowledge of cryptographic modernization initiatives, crypto-agility, and post-quantum cryptography (PQC).
  • Familiarity with machine identity frameworks such as SPIFFE/SPIRE and emerging certificate-based identity technologies.
  • Experience applying NIST and industry security standards related to PKI and cryptography.
  • Experience leveraging modern engineering tools and AI-assisted development practices to improve engineering productivity and solution quality.
  • Experience working with Agile methodologies including Kanban or Scrum and workflow management using Jira.
  • Self-starter with the ability to manage multiple engineering projects.
  • Strong communication and interpersonal skills.

Job Expectations:

• This position offers a hybrid work schedule
• This position is not eligible for Visa sponsorship

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

Posting End Date:

*Job posting may come down early due to volume of applicants.