PKI, Certificate Management Engineer

Stelle nicht auf LinkedIn

🕒 vor 10 Tagen

🇺🇸 Vereinigte Staaten – Remote

⏰ Vollzeit

🟡 Mittelstufe

🟠 Senior

👷🏻‍♀️ Ingenieur

👻 Geisterscore 25%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

True Zero Technologies, LLC

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

💼 Beratung

🏥 Gesundheitswesen

📦 Logistik

Consulting • Healthcare • Logistics

True Zero Technologies, LLC ist ein in Veteranenbesitz befindliches Unternehmen, das sich auf Cybersecurity-Lösungen spezialisiert hat. Das Unternehmen bietet eine Vielzahl von Dienstleistungen an, darunter Sicherheitsengineering und -architektur, Einführung neuer Technologien, Cyberoperationen, Cyber-Bedrohungsinformationen, Penetrationstests und Informationssicherheit. True Zero ist auch bekannt für seine Managed Services und Cloud-Sicherheitsfähigkeiten. Das Unternehmen arbeitet mit Technologieführern wie Tanium, Splunk, Cribl und Zscaler zusammen, um wirkungsvolle und wertvolle Lösungen bereitzustellen, die Organisationen helfen, zu innovieren und dabei ihre Sicherheits- und Betriebsprogramme zu verbessern. True Zero ist verpflichtet, Organisationen mit umsetzbaren Erkenntnissen zu unterstützen, um ihre IT-Umgebungen effektiv abzusichern.

Beschreibung

• Design, implement, and maintain enterprise Public Key Infrastructure (PKI) supporting internal and external certificate requirements • Manage the full certificate lifecycle, including request, issuance, validation, distribution, renewal, revocation, expiration, and retirement • Implement and maintain ACME-based certificate automation and automated enrollment and renewal workflows • Manage certificates across Windows, Linux, cloud platforms, containers, applications, load balancers, network devices, and other enterprise systems • Design and operate integrations with AWS Private Certificate Authority, AWS Certificate Manager, and related AWS services • Implement and administer HSM capabilities, including AWS CloudHSM, for private-key protection and cryptographic operations • Support Federal PKI and DoD PKI trust relationships, certificate chains, and interoperability requirements • Integrate CAC/PIV authentication with enterprise applications, identity platforms, operating systems, and secure access workflows • Implement and maintain mutual TLS (mTLS) for workload identity, service-to-service authentication, and Zero Trust communications • Ensure cryptographic implementations use FIPS-validated modules and approved algorithms where required • Establish certificate discovery, inventory, monitoring, and alerting to identify unmanaged certificates and prevent expiration-related outages • Develop governance standards for certificate ownership, issuance, naming, key length, algorithms, renewal periods, revocation, and retention • Integrate certificate management with IAM platforms and authentication workflows • Support secure networking and communications through TLS, mTLS, certificate-based authentication, and encryption standards • Monitor PKI platform health, certificate status, revocation services, HSM operations, and certificate expiration events • Troubleshoot certificate-chain, trust-store, TLS, cryptographic, enrollment, renewal, and authentication issues • Partner with cybersecurity, identity, cloud, platform, network, and application teams to integrate PKI services into enterprise architectures and deployment workflows • Maintain PKI architecture documentation, certificate policies, operational procedures, runbooks, governance standards, and audit evidence

🎯 Anforderungen

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline • Demonstrated experience designing, implementing, or administering enterprise Public Key Infrastructure (PKI) • Strong knowledge of X.509 certificates, certificate authorities, trust chains, cryptographic algorithms, key management, revocation, and certificate lifecycle management • Experience implementing automated certificate issuance and renewal using ACME or comparable technologies • Experience managing certificates across Windows, Linux, cloud, containerized, network, and application environments • Hands-on experience with AWS Private CA, AWS Certificate Manager, AWS CloudHSM, or comparable cloud PKI and HSM technologies • Strong understanding of cryptography, encryption, digital signatures, hashing, key exchange, and secure communications • Experience integrating PKI with IAM, directory services, applications, network infrastructure, and cloud services • Familiarity with Federal PKI, DoD PKI, CAC/PIV authentication, and government certificate trust models • Experience implementing mTLS and certificate-based workload identity in Zero Trust architectures • Familiarity with FIPS-validated cryptography and cryptographic requirements for government or regulated environments • Experience with certificate discovery, inventory management, expiration monitoring, and proactive renewal processes • Strong understanding of TLS configuration, secure networking, trust stores, certificate validation, and PKI troubleshooting • Experience supporting AWS GovCloud, government, defense, or other regulated environments is preferred • Strong governance, risk management, documentation, troubleshooting, and cross-functional collaboration skills • Preferred certifications: AWS Certified Security – Specialty; Microsoft Certified: Cybersecurity Architect Expert (SC-100); Red Hat Certified Engineer (RHCE); Microsoft Certified: Windows Server Hybrid Administrator Associate; Entrust or DigiCert PKI certifications, where applicable

🏖️ Vorteile

• Competitive salary, paid twice per month • Best in class medical coverage • 100% of medical premiums covered by True Zero • Company wide new business incentive programs • Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.) • 3 weeks of PTO starting + 11 Paid Holidays Annually • 401k Program with 100% company match on the first 4% • Monthly reimbursement of Cell Phone and Home Internet costs • Paternity/Maternity Leave • Investment in training and certifications to broaden and deepen your technical skills