PKI / Certificate Management Engineer (R-00198)

True Zero Technologies is seeking a skilled PKI / Certificate Management Engineer to design, deploy, and maintain secure, scalable Public Key Infrastructure solutions. This role is essential for supporting enterprise, cloud, and government environments by ensuring robust certificate lifecycle management and advancing Zero Trust architecture initiatives.

Key responsibilities

• Design and maintain enterprise PKI systems, managing the full certificate lifecycle from issuance to retirement.
• Implement ACME-based automation and workflows to streamline certificate enrollment and renewal processes.
• Manage certificate deployments across diverse environments, including Windows, Linux, cloud platforms, and containers.
• Integrate AWS Private CA, AWS Certificate Manager, and Hardware Security Modules (HSM) to secure cryptographic operations.
• Support Federal and DoD PKI trust relationships, CAC/PIV authentication, and mutual TLS for secure workload identity.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or a related technical field.
• Proven experience in designing and administering enterprise-level Public Key Infrastructure.
• Strong knowledge of X.509 certificates, cryptographic algorithms, and certificate lifecycle management.
• Hands-on experience with cloud-native PKI services, specifically within AWS environments.
• Familiarity with FIPS-validated cryptography, Zero Trust architectures, and government trust models.

What we offer

• Comprehensive medical coverage with 100% of premiums paid by the company.
• Generous paid time off policy including 3 weeks of PTO and 11 annual holidays.
• 401k program featuring a 100% company match on the first 4% of contributions.
• Monthly reimbursement for home internet and cell phone expenses.
• Dedicated investment in professional development, training, and industry certifications.