PKI Engineer

PKI Engineer This role has been designed as Hybrid with an expectation that you will work on average 2-3 days per week from an HPE office.

• Design, deploy, and maintain PKI infrastructure, including Certificate Authorities (CA), Registration Authorities (RA), and Hardware Security Modules (HSM).
• Ensure the secure generation, distribution, and management of digital certificates.
• Conduct regular security assessments and audits of PKI systems to identify vulnerabilities.
• Provide support for PKI-related issues, including certificate issuance, renewal, and revocation.
• Troubleshoot and resolve PKI-related incidents and problems.
• Create and maintain comprehensive documentation for PKI processes and procedures.
• Provide training and guidance to other IT staff and end-users on PKI-related topics.
• Stay informed about emerging threats and advancements in PKI and cryptography.
• Recommend and implement improvements to enhance the security and efficiency of PKI systems.

• Bachelor s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Relevant certifications such as CISSP, CISA, or CEH are a plus.
• 3+ years of experience in IT security, network security, or a IAM related field.
• Proficiency in PKI technologies, including Certificate Authorities (CA), Registration Authorities (RA), and hardware security modules (HSM).
• Familiarity with cryptographic protocols such as SSL/TLS, IPsec, and S/MIME.
• Experience with PKI software and tools (e.g., DigiCert, OpenSSL, Venafi)
• Knowledge of encryption algorithms and methods (e.g., RSA, ECC, AES).
• Understanding of network protocols and security (e.g., TCP/IP, DNS, VPN).
• Strong analytical and problem-solving skills.
• Excellent communication skills to work with cross-functional teams and explain complex technical concepts to non-technical stakeholders.
• Ability to work independently and as part of a team.

• Knowledge of industry standards and best practices related to PKI (e.g., NIST guidelines, ISO 27001).
• Familiarity with compliance requirements such as GDPR, HIPAA, or PCI-DSS.

• Proactive approach to identifying and mitigating security risks.

• Languages: Perl, PHP, Bash Shell, Python, HTML
• Good knowledge of Linux environment, some administration experience
• Deep understanding of certificate management

Accountability, Accountability, Action Planning, Active Learning (Inactive), Active Listening, Agile Methodology, Bias, Business, Coaching, Creativity, Critical Thinking, Cybersecurity, Data Analysis Management, Data Collection Management (Inactive), Data Controls, Design Thinking, Development Methodologies, Empathy, Follow-Through, Growth Mindset, Implementation Methodologies, Infrastructure Design, Intellectual Curiosity (Inactive), Long Term Planning, Managing Ambiguity {+ 4 more} Information Technology TCP_04