PKI Senior Security Engineer

Role description

#Careers

JC: 1505824

Job Title: Specialist - CyberSecurity

Work Location: Atlanta, Georgia(Onsite)

Employment Type: Full Time

Max Salary : $110k- $130k per Annum

PKI Senior Security Engineer

Job description

The PKI Engineer is responsible for designing operating and enhancing the enterprise Public Key Infrastructure PKI and certificate management services

This role ensures secure authentication encryption and certificate life cycle management across enterprise systems supporting regulatory compliance and operational stability

Ensure availability resiliency and patching of PKI infrastructure

Support certificate issuance renewal revocation and lifecycle management

Manage large scale certificate environments across applications and infrastructure

Ensure timely renewal and replacement of certificates

Support trust store management and certificate chain integrity

Build and implement automation for certificate lifecycle management

Integrate PKI services with enterprise platforms CI/CD pipelines cloud services applications

Deploy and operationalize tools such as connectors and automation pipelines

Enforce security policies related to certificate usage and cryptography

Define and maintain standards for certificate issuance validity and usage

Support compliance with regulatory frameworks eg NIST CMMC PCI TSA directives

Partner with application and infrastructure teams to enable certificate automation

Provide guidance and supporting tooling while ensuring clear ownership boundaries

Assist teams with onboarding to PKI services and automation

Identify and remediate risks related to certificate expiration misconfiguration or trust failures

Support incident response involving certificate or encryption issues

Improve visibility and reporting for certificate health and compliance

Support adoption of new cryptographic standards eg postquantum cryptography

Assist in modernization of PKI architecture and tooling

Evaluate new solutions for scalability and resilience

Qualifications

Bachelors degree in Computer Science Cybersecurity or related field or equivalent experience.

3-7 years in PKI cybersecurity engineering or infrastructure security.

Handson experience with certificate lifecycle management.

Experience with PKI toolsplatforms eg Venafi DigiCert Microsoft CA AWS ACM.

Understanding of TLSSSL cryptographic principles and key management.

Experience with

HSMs and key custody operations

PKI automation APIs pipelines scripting

Cloud certificate services AWS Azure

Knowledge of compliance frameworks NIST PCIDSS CMMC

Experience scaling PKI in large enterprise environments

Familiarity with trust store management across distributed systems

Responsibilities

Responsible for the design testing evaluation implementation support management and deployment of security systemsdevices used to safeguard the organizations information assets

Also responsible for analyzing the information security environment and assisting with the development of security measures to safeguard information against accidental or unauthorized modification destruction or disclosure

Works with the technical team to recover data after a security breach Configures and installs firewalls and intrusion detection systems

Develops automation scripts to handle and track incidents

Investigates intrusion incidents conducts forensic investigations and mounts incident responses

Delivers technical reports and formal papers on test findings

Installs firewalls data encryption and other security measures

Maintains access by providing information resources and technical support

Ensures authorized access by investigating improper access revoking access reporting violations monitoring information requests by new programming recommending improvements

Updates job knowledge by participating in educational opportunities reading professional publications maintaining personal networks participating in professional organizations

Accomplishes information systems and organization mission by completing related results as needed

Builds deploys and tracks security measurements for computer systems and networks

Mitigates security vulnerabilities by implementing applicable solutions and tools

Performs vulnerability testing risk analyses and security assessments

Collaborates with colleagues on authentication authorization and encryption solutions

Tests security solutions using industry standard analysis criteria

Responds to information security issues during each stage of a projects lifecycle

Performs risk assessments and testing of data processing systems

Establishes system controls by developing framework for controls and levels of access recommending improvements

Establishes computer and terminal physical security by developing standards policies and procedures coordinates with facilities security recommends improvements

Safeguards computer files by performing regular backups developing procedures for source code management and disaster

Skills Mandatory Skills : Automation, Bash/Shell scripting, Data Encryption and Key Management, MS PKI for Certificate Management, Venafi

Other details

Actual compensation within the range will be dependent upon the individual's skills, experience, performance and internal equity.

Benefits/perks listed below may vary depending on the nature of your employment with LTIMindtree (“LTIM”):

Benefits and Perks:

• Comprehensive Medical Plan Covering Medical, Dental, Vision
• Short Term and Long-Term Disability Coverage
• 401(k) Plan with Company match
• Life Insurance
• Vacation Time, Sick Leave, Paid Holidays
• Paid Paternity and Maternity Leave

The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job-related skills, experience, and relevant education or training.

Depending on the position offered, other forms of compensation may be provided as part of overall compensation like an annual performance-based bonus, sales incentive pay and other forms of bonus or variable compensation.

Disclaimer

The compensation and benefits information provided herein is accurate as of the date of this posting. LTIMindtree is an equal opportunity employer that is committed to diversity in the workplace.

Our employment decisions are made without regard to race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), gender identity or expression, national origin, ancestry, age, family-care status, veteran status, marital status, civil union status, domestic partnership status, military service, handicap or disability or history of handicap or disability, genetic information, atypical hereditary cellular or blood trait, union affiliation, affectional or sexual orientation or preference, or any other characteristic protected by applicable federal, state, or local law, except where such considerations are bona fide occupational qualifications permitted by law.

Benefits

• Compensation range: $110,000.00 to $130,000.00 per year About LTM LTM is an AI-centric global technology services company and the Business Creativity partner to the world’s largest and most disruptive enterprises.
• We bring human insights and intelligent systems together to help clients create greater value at the intersection of technology and domain expertise.
• Our capabilities span integrated operations, transformation, and business AI — enabling new ways of working, new productivity paradigms, and new roads to value.
• Together with over 87,000 employees across 40 countries and our global network of partners, LTM — a Larsen & Toubro company — owns business outcomes for our clients, helping them not just outperform the market, but to Outcreate it.
• Please also note that neither LTM nor any of its authorized recruitment agencies/partners charge any candidate registration fee or any other fees from talent (candidates) towards appearing for an interview or securing employment/internship.
• Candidates shall be solely responsible for verifying the credentials of any agency/consultant that claims to be working with LTM for recruitment.
• Please note that anyone who relies on the representations made by fraudulent employment agencies does so at their own risk, and LTM disclaims any liability in case of loss or damage suffered as a consequence of the same.
• Recruitment Fraud Alert - https://www.ltm.com/careers/recruitment-fraud-alert