Senior PKI Engineer

Emploi pas sur LinkedIn

🕒 il y a 7 jours

🤠 Texas – Distant

🤠 Texas – Remote

💵 $92 700 - $185 400 / an

⏰ Temps Plein

🟠 Senior

👷🏻‍♀️ Ingénieur

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Recevoir des emails pour des emplois à distance

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

CVS Health

Site WebLinkedInTous les Emplois

10 000+ employés

Fondée en 1963

⚕️ Assurance santé

🛒 Commerce de détail

🧘 Bien-être

Healthcare Insurance • Retail • Wellness

CVS Health est une entreprise américaine de premier plan dans le domaine de la santé, dédiée à l'amélioration de l'accès et de l'accessibilité financière des soins de santé. L'entreprise s'appuie sur une approche globale qui comprend les services de santé, l'assurance santé et la gestion des prestations pharmaceutiques. À travers ses filiales, telles qu'Aetna et CVS Caremark, CVS Health propose une gamme de services qui favorisent le bien-être, la gestion des maladies chroniques et une couverture abordable des médicaments prescrits. CVS Health exploite des pharmacies de proximité, fournit des services de pharmacie par correspondance et gère des programmes de médicaments spécialisés, visant à rendre les soins de santé pratiques et accessibles à tous. Animée par une mission de connecter les individus aux services de soins essentiels, CVS Health s'engage à favoriser des communautés en meilleure santé et à soutenir le bien-être de toutes les personnes.

Description

• design, build, and operate the certificate lifecycle management infrastructure that secures one of the largest healthcare enterprises in the United States • Engineer and maintain PowerShell and Python automation for certificate lifecycle operations: issuance, renewal, retirement, and reporting • Own and enhance the daily PKI operational reporting for certificate health monitoring across the enterprise • Automate certificate automation and governance workflows, including bulk operations across Venafi TPP REST APIs • Drive private chain adoption across application teams, targeting full migration off public CA chains for internal workloads • Manage Digicert Certificate authority and Digicert one Certificate lifecycle management • Execute the Legacy MSCA shutdown plan • Track and remediate certificates tied to the Legacy CA expiration (Feb 2027 hard deadline) • Maintain Zero Trust alignment across all PKI services: mTLS enforcement, workload identity, client authentication policies • Support HIPAA, PCI-DSS, and SOX audit readiness through certificate inventory governance, expiration tracking, and compliance reporting. • Contribute to PQC readiness planning: crypto-agility assessments, hybrid certificate testing, and algorithm migration roadmaps • Collaborate with network, application, and cloud teams to resolve certificate-related incidents and architecture reviews

🎯 Exigences

• 5+ years of hands-on PKI/CLM engineering experience in an enterprise environment (10,000+ certificates under management) • Deep working knowledge of X.509 certificate standards, CA hierarchies (root, intermediate, issuing), and certificate chain validation • Production experience with at least one enterprise CLM platform: Venafi TPP, AppViewX, Keyfactor, or CyberArk (formerly Venafi) • Strong scripting/automation skills in PowerShell and/or Python, including REST API integration with CLM and CA platforms • Hands-on experience with certificate provisioning to load balancers (F5 BIG-IP), CDNs (Akamai), web servers (IIS, Apache/Nginx), and cloud platforms (AWS ACM, Azure Key Vault) • Solid understanding of TLS/SSL protocols, cipher suites, key exchange mechanisms, and certificate revocation (CRL/OCSP) • Familiarity with ServiceNow, Jira, or equivalent ITSM/project tracking tools in a regulated enterprise environment.

🏖️ Avantages

• medical, dental, and vision coverage • paid time off • retirement savings options • wellness programs • other resources, based on eligibility