Sr. Security Engineer

YOUR RESPONSIBILITIES IN THIS ROLE:

1. PKI Infrastructure & OperationsEnsure availability, resiliency, and patching of PKI infrastructureSupport certificate issuance, renewal, revocation, and lifecycle management
2. Certificate Lifecycle ManagementManage large-scale certificate environments across applications and infrastructureEnsure timely renewal and replacement of certificatesSupport trust store management and certificate chain integrity
3. Automation & IntegrationBuild and implement automation for certificate lifecycle managementTanesha MagbyIntegrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications)Deploy and operationalize tools such as connectors and automation pipelines
4. Governance, Standards & Policy EnforcementEnforce security policies related to certificate usage and cryptographyDefine and maintain standards for certificate issuance, validity, and usageSupport compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives)
5. Cross-Team CollaborationPartner with application and infrastructure teams to enable certificate automationProvide guidance and supporting tooling while ensuring clear ownership boundariesAssist teams with onboarding to PKI services and automation
6. Risk Reduction & Incident SupportIdentify and remediate risks related to certificate expiration, misconfiguration, or trust failuresSupport incident response involving certificate or encryption issuesImprove visibility and reporting for certificate health and compliance
7. Emerging Crypto & Future ReadinessSupport adoption of new cryptographic standards (e.g., post-quantum cryptography)Assist in modernization of PKI architecture and toolingEvaluate new solutions for scalability and resilience

Quals--

THIS IS A CRITICAL NEED

Must be able to hit the ground running.

WHAT YOU NEED TO SUCCEED (MINIMUM QUALIFICATIONS)Bachelor s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)3 7+ years in PKI, cybersecurity engineering, or infrastructure securityHands-on experience with certificate lifecycle managementExperience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM)Understanding of TLS/SSL, cryptographic principles, and key managementConsistently prioritizes safety and security of self, others, and personal data.Embraces diverse people, thinking, and styles.Possesses a high school diploma, GED, or high school equivalency.Is at least 18 years of age and has authorization to work in the United States.WHAT WILL GIVE YOU A COMPETITIVE EDGE (PREFERRED QUALIFICATIONS)Experience with:HSMs and key custody operationsPKI automation (APIs, pipelines, scripting)Cloud certificate services (AWS, Azure)Knowledge of compliance frameworks (NIST, PCI-DSS, CMMC)Experience scaling PKI in large enterprise environmentsFamiliarity with trust store management across distributed systems

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. NLB is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, contact HR department by sending an e-mail to notifications@nlbservices.com.