Information Security Engineer – PKI, Systems

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the design, modernization, and enhancement of enterprise PKI and certificate management systems.

• Offer technical leadership for certificate lifecycle management, secrets management, and cryptographic services across hybrid and cloud infrastructures.

• Create and implement automated, scalable processes for certificate provisioning and renewal utilizing contemporary engineering practices.

• Develop self-service functionalities that empower development and infrastructure teams to securely request and provision certificates with minimal manual input.

• Design and execute API-driven integrations that allow CI/CD pipelines and DevOps platforms to securely interact with enterprise secrets management solutions.

• Optimize the utilization of existing security platforms by standardizing enterprise workflows, removing siloed solutions, and encouraging the adoption of centralized services.

• Establish engineering standards, best practices, and architectural patterns for PKI, certificate management, and secrets management.

• Act as the senior technical escalation contact for intricate cryptographic platform issues and guide engineering teams in automation and operational excellence.

• Contribute to platform hardening through secure configuration, delegation models, monitoring, patch management, and ongoing optimization.

• Create engineering roadmaps and implementation strategies that align with client business goals and evolving security needs.

• Collaborate with cross-functional engineering, infrastructure, DevOps, security, and application teams to deliver scalable enterprise identity and encryption solutions.

• Assess emerging technologies and industry trends to ensure long-term sustainability and readiness of the platform.

⛳️ Requirements

• 7–10+ years of experience in designing, implementing, and managing enterprise PKI, certificate lifecycle management, or cryptographic platforms.

• Profound expertise in PKI architecture, certificate management methodologies, cryptographic services, and enterprise security best practices.

• 5+ years of engineering experience in developing automation solutions within Identity, Directory Services, or DevOps environments.

• Proficient in PowerShell scripting and automation.

• Experience in designing and supporting Infrastructure as Code (IaC) and CI/CD pipelines.

• Skilled in integrating enterprise platforms via REST APIs and automation frameworks.

• Practical experience in deploying, managing, and troubleshooting Hardware Security Modules (HSMs).

• Familiarity with cloud platforms such as Azure, AWS, or Google Cloud, with a strong understanding of Azure Key Vault or comparable cloud secrets management services.

• Proven track record of collaborating with cross-functional technical teams to deliver enterprise infrastructure and security solutions.

• Strong grasp of incident, problem, request, and change management processes.

• Excellent communication skills, capable of engaging with technical teams, architects, project managers, and business stakeholders.

🏝️ Benefits

• Competitive salary package

• Share plan

• Company performance bonuses

• Value-based recognition awards

• Referral bonus

• Career coaching

• Global career opportunities

• Non-linear career paths

• Internal development programmes for management and technical leadership

• Complex projects

• Rotations

• Internal tech communities

• Training

• Certifications

• Coaching

• Online learning platforms subscriptions

• Pass-it-on sessions

• Workshops

• Conferences

• Hybrid work and flexible working hours

• Employee assistance programme

• Global internal wellbeing programme

• Access to wellbeing apps

• Global internal tech communities

• Hobby clubs and interest groups

• Inclusion and diversity programmes

• Events and celebrations