Data Security Engineer - PKI & Certificate Management (3-7 yrs)

About the Role :

We are seeking a highly skilled and experienced Senior Data Security Engineer with a strong focus on Public Key Infrastructure (PKI) and certificate management to join our growing security team.

As a Senior Data Security Engineer, you will be responsible for designing, implementing, and maintaining a secure and reliable PKI environment to protect our critical assets and ensure the integrity of our operations.

Key Responsibilities :

- Design, implement, and manage PKI solutions, including Certificate Authorities (CAs), Registration Authorities (RAs), and key management systems.

- Integrate PKI solutions with other security systems, such as firewalls, VPNs, and intrusion detection systems.

- Ensure compliance with relevant security standards and regulations (e.g., PCI DSS, HIPAA, GDPR).

- Manage the entire certificate lifecycle, including issuance, renewal, revocation, and key management.

- Implement automated processes for certificate issuance and renewal.

- Monitor certificate expirations and proactively address potential issues.

- Conduct security assessments and vulnerability scans of PKI systems.

- Identify and mitigate PKI-related security risks and threats.

- Develop and implement security policies and procedures for PKI usage.

- Provide technical support for PKI-related issues.

- Troubleshoot and resolve PKI-related incidents and outages.

- Guide and mentor junior security engineers on PKI best practices and technologies.

- Share knowledge and expertise within the security team.

- Coordinate and communicate with PKI vendors (e.g., Digicert, Sectigo, Microsoft) on technical issues and service requests.

Qualifications :

Essential :

- 3+ years of experience in cybersecurity, with at least 3 years of hands-on experience with PKI and certificate management.

- Proven experience with at least one major PKI solution (e.g., Digicert PKI, Microsoft PKI/AD CS, Sectigo).

- Strong understanding of PKI concepts, including cryptography, X.509 certificates, and key management best practices.

- Experience with certificate lifecycle management tools and processes.

- Strong analytical, problem-solving, and troubleshooting skills.

- Excellent communication and interpersonal skills.

- Bachelor's degree in Computer Science, Cybersecurity, or a related field.