PKI Engineer, Consultant

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a PKI Engineer, Consultant based in the United States.

Join a healthcare technology environment where secure, reliable infrastructure plays a critical role in protecting sensitive data and supporting essential services. As a PKI Engineer, you will design, operate, and enhance enterprise certificate services across cloud and on-premises environments. You will take ownership of the full certificate lifecycle, building automated processes that strengthen security, reduce operational overhead, and prevent service disruptions. Working closely with security, platform, and application engineering teams, you will integrate PKI capabilities into modern infrastructure and development workflows. You will also explore practical applications of AI to improve operational efficiency while maintaining strong security controls. This contract opportunity is ideal for an experienced security engineer who enjoys solving complex infrastructure challenges and delivering reliable solutions at scale.

Accountabilities

You will lead the architecture, operation, and continuous improvement of certificate services, ensuring secure key management and dependable certificate lifecycle processes across enterprise infrastructure. Your responsibilities will include:

• Design, implement, and operate certificate authorities, registration authorities, hardware security module (HSM) integrations, and certificate management services.

• Establish and maintain best practices for cryptographic key protection, access control, auditing, and recovery.

• Manage the complete certificate lifecycle, including enrollment, issuance, renewal, revocation, monitoring, and incident response.

• Develop automation to minimize manual certificate management tasks and prevent service outages caused by expired, invalid, or misconfigured certificates.

• Integrate PKI services with applications, devices, and workloads across on-premises environments and cloud platforms such as AWS and Azure.

• Define, implement, and maintain infrastructure as code for PKI services and their supporting cloud infrastructure.

• Troubleshoot certificate-related issues, including trust chain failures, TLS problems, and production service disruptions.

• Collaborate with security, platform, and application teams to make certificate management secure, scalable, and straightforward.

• Evaluate practical opportunities to use AI to improve operational workflows while ensuring appropriate security controls and human oversight.

• Document technical designs, operational procedures, and architecture decisions to support consistency and maintainability.

Requirements

The ideal candidate is a seasoned PKI and security infrastructure specialist with deep knowledge of certificate architecture, strong automation capabilities, and experience operating production environments. You should be comfortable working across cloud infrastructure and engineering teams while independently addressing complex technical challenges. Key qualifications include:

• 7+ years of experience in PKI engineering, certificate services, or security infrastructure engineering.

• Expert knowledge of certificate authority architecture, certificate profiles and policies, cryptographic key management, revocation mechanisms, and the X.509 certificate lifecycle.

• Hands-on experience operating production PKI services and troubleshooting certificates, trust chains, and TLS-related issues.

• Experience with AWS or Azure and integrating certificate services with cloud-based workloads.

• Strong automation and scripting skills using Python, PowerShell, or Go.

• Experience with infrastructure as code tools such as Terraform, Bicep, or CloudFormation.

• Familiarity with certificate enrollment and automation protocols, including ACME, SCEP, or EST.

• Strong understanding of secure infrastructure design, access management, and operational security practices.

• Ability to document technical architectures and designs clearly.

• Excellent collaboration and communication skills, with the ability to work effectively across security, platform, and application engineering teams.

• Must be legally authorized to work in the United States without requiring employment sponsorship. W2 employment eligibility is required; C2C arrangements are not accepted.

Benefits

• Hourly pay rate: $75–$80 USD.

• Contract duration: 12 months.

• Hybrid or remote working arrangements.

• Opportunity to contribute to security infrastructure within the healthcare technology sector.

• Work with modern cloud platforms, automation technologies, and enterprise PKI systems.