Senior PKI Engineer

Vaga não está no LinkedIn

🕒 Junho 1

🤠 Texas – Remoto

🤠 Texas – Remote

💵 $92.700 - $185.400 / ano

⏰ Tempo Integral

🟠 Sênior

👷🏻‍♀️ Engenheiro

Candidatar-se

Encontrar Vagas Remotas Similares

Receber Emails de Vagas Remotas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

CVS Health

SiteLinkedInTodas as Vagas

10.000+ funcionários

Fundada em 1963

⚕️ Seguro de Saúde

🛒 Varejo

🧘 Bem-estar

Healthcare Insurance • Retail • Wellness

CVS Health é uma empresa líder de saúde nos Estados Unidos, dedicada a ampliar o acesso e a acessibilidade ao cuidado. A empresa adota uma abordagem abrangente que inclui serviços de saúde, seguro saúde e gestão de benefícios farmacêuticos (PBM). Por meio de suas subsidiárias, como Aetna e CVS Caremark, a CVS Health oferece uma variedade de serviços que promovem o bem-estar, a gestão de condições de saúde e a cobertura acessível de medicamentos prescritos. A CVS Health opera farmácias de bairro, oferece serviços de farmácia por correspondência e gerencia programas de medicamentos de especialidade, com o objetivo de tornar o cuidado com a saúde conveniente e acessível para todos. Movida pela missão de conectar pessoas a serviços essenciais de cuidado, a CVS Health está comprometida em fomentar comunidades mais saudáveis e apoiar o bem-estar de todas as pessoas.

Descrição

• design, build, and operate the certificate lifecycle management infrastructure that secures one of the largest healthcare enterprises in the United States • Engineer and maintain PowerShell and Python automation for certificate lifecycle operations: issuance, renewal, retirement, and reporting • Own and enhance the daily PKI operational reporting for certificate health monitoring across the enterprise • Automate certificate automation and governance workflows, including bulk operations across Venafi TPP REST APIs • Drive private chain adoption across application teams, targeting full migration off public CA chains for internal workloads • Manage Digicert Certificate authority and Digicert one Certificate lifecycle management • Execute the Legacy MSCA shutdown plan • Track and remediate certificates tied to the Legacy CA expiration (Feb 2027 hard deadline) • Maintain Zero Trust alignment across all PKI services: mTLS enforcement, workload identity, client authentication policies • Support HIPAA, PCI-DSS, and SOX audit readiness through certificate inventory governance, expiration tracking, and compliance reporting. • Contribute to PQC readiness planning: crypto-agility assessments, hybrid certificate testing, and algorithm migration roadmaps • Collaborate with network, application, and cloud teams to resolve certificate-related incidents and architecture reviews

🎯 Requisitos

• 5+ years of hands-on PKI/CLM engineering experience in an enterprise environment (10,000+ certificates under management) • Deep working knowledge of X.509 certificate standards, CA hierarchies (root, intermediate, issuing), and certificate chain validation • Production experience with at least one enterprise CLM platform: Venafi TPP, AppViewX, Keyfactor, or CyberArk (formerly Venafi) • Strong scripting/automation skills in PowerShell and/or Python, including REST API integration with CLM and CA platforms • Hands-on experience with certificate provisioning to load balancers (F5 BIG-IP), CDNs (Akamai), web servers (IIS, Apache/Nginx), and cloud platforms (AWS ACM, Azure Key Vault) • Solid understanding of TLS/SSL protocols, cipher suites, key exchange mechanisms, and certificate revocation (CRL/OCSP) • Familiarity with ServiceNow, Jira, or equivalent ITSM/project tracking tools in a regulated enterprise environment.

🏖️ Benefícios

• medical, dental, and vision coverage • paid time off • retirement savings options • wellness programs • other resources, based on eligibility