Senior PKI Engineer

State Street

Senior PKI Engineer at State Street managing PKI and certificate lifecycle across various environments. Collaborating with teams to design secure, scalable, and automated cryptographic services.

Posted 7/26/2026full-timeAustin • Massachusetts, New Jersey, Pennsylvania, Texas • 🇺🇸 United StatesSenior💰 $120,000 - $202,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in designing and maintaining enterprise PKI and certificate lifecycle management platforms, with strong capabilities in automation, integration, and cryptographic solutions across various environments. Proficient in scripting and automation using PowerShell and Python, with a solid understanding of cloud platforms like Azure and AWS.

Highest-signal resume keywords

PKI ManagementCertificate Lifecycle ManagementAutomation with PowerShellCloud Platform ExperienceCybersecurity Initiatives

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PKITLSSSLCertificate AuthoritiesHSMsOCSPCRLSSHCode SigningScripting

Soft Skills

TroubleshootingCommunicationDocumentationStakeholder Management

Tools & Technologies

KeyfactorDigiCertMicrosoft ADCSVenafiServiceNowSailPointCyberArkSplunkAzureAWS

Industry Keywords

Certificate Lifecycle ManagementCrypto AgilityPost-Quantum CryptographyAudit InitiativesRegulatory Compliance

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityPythonServiceNowSplunk

About the role

Key responsibilities & impact

Design, implement and maintain enterprise PKI and certificate lifecycle management platforms
Lead automation for certificate issuance, renewal, deployment, validation and governance workflows
Develop integrations with enterprise platforms such as ServiceNow, SailPoint, CyberArk, Splunk, Azure, AWS and related security technologies
Support public and private Certificate Authority services, trust models, certificate profiles and lifecycle standards
Drive machine identity management capabilities across servers, applications, APIs, devices and cloud services
Lead certificate discovery, remediation, migration and platform modernization initiatives
Develop automation using APIs, PowerShell, Python and modern orchestration tools
Partner with infrastructure, cloud, application and security teams to implement cryptographic solutions
Support crypto agility and post-quantum cryptography readiness initiatives
Support audit, regulatory and cybersecurity initiatives related to PKI and cryptography.

Requirements

What you’ll need

7+ years of PKI, cybersecurity, infrastructure engineering or related enterprise technology experience
Strong knowledge of PKI, TLS, SSL, certificate authorities, HSMs, OCSP, CRL, SSH and code signing concepts
Experience with Keyfactor, DigiCert, Microsoft ADCS, Venafi or comparable certificate lifecycle management platforms
Strong scripting and automation experience with PowerShell, Python, REST APIs or similar technologies
Experience working with cloud platforms such as Azure and AWS
Strong troubleshooting, communication, documentation and stakeholder management skills.

Benefits

Comp & perks

our retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
eligibility for certain tax advantaged savings plans