PKI Engineer

State Street

PKI Engineer supporting enterprise PKI platforms and automation workflows at State Street. Responsible for integrations, compliance, and documentation to reduce operational friction.

Posted 7/26/2026full-timeQuincy • Massachusetts, New Jersey, Pennsylvania, Texas • 🇺🇸 United StatesMid-LevelSenior💰 $90,000 - $157,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in PKI and certificate lifecycle management, with strong capabilities in automation, integration, and compliance support. Proficient in troubleshooting and documentation within enterprise security environments.

Highest-signal resume keywords

PKI ManagementCertificate Lifecycle ManagementAutomation ScriptingTLS/SSL KnowledgeIncident Investigation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PKISecurity EngineeringInfrastructure AutomationCertificate IssuanceCertificate RenewalPowerShellPythonAPIsTroubleshootingDocumentation

Soft Skills

CollaborationProblem Management

Tools & Technologies

ServiceNowKeyfactorDigiCertMicrosoft ADCSCloud Platforms

Industry Keywords

Certificate AuthoritiesCryptographic ConceptsMachine Identity ManagementAudit ComplianceRisk Evidence

Tech Stack

Tools & technologies

CloudLinuxPythonServiceNow

About the role

Key responsibilities & impact

Support engineering and maintenance of enterprise PKI and certificate lifecycle management platforms
Develop and maintain automation for certificate issuance, renewal, reporting and remediation workflows
Assist with integrations across ServiceNow, cloud platforms, monitoring tools and enterprise security systems
Support certificate discovery, inventory enrichment, ownership mapping and remediation activities
Support machine identity management and certificate deployment patterns across infrastructure and application teams
Create and maintain technical documentation, support procedures and automation runbooks
Assist with testing, implementation and transition of engineering changes into operations
Participate in incident investigation, problem management and service improvement activities
Support audit, compliance and risk evidence requests related to PKI and certificate management

Requirements

What you’ll need

3+ years of PKI, security engineering, infrastructure automation or related technology experience
Working knowledge of TLS, SSL, certificate authorities, certificate lifecycle management and basic cryptographic concepts
Experience with scripting or automation using PowerShell, Python, APIs or similar tools
Familiarity with Windows, Linux, networking and cloud environments
Experience with Keyfactor, DigiCert, Microsoft ADCS or similar platforms is preferred
Strong troubleshooting, documentation and collaboration skills

Benefits

Comp & perks

our retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
eligibility for certain tax advantaged savings plans