PKI Engineer

State Street

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Quincy, MA
Salary
$120,000–$202,500 / yr
Posted
13 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $175k
This role $161k
$109k most similar roles pay here $227k

This role pays less than 60% of similar roles. Most pay $142,475–$206,837 — the shaded band above. At the midpoint, this role pays about $161k versus about $175k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 176 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 172 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · PKI Engineer

The PKI Engineer joins the team to support engineering, automation, and continuous improvement for enterprise PKI, certificate lifecycle management, and machine identity services. This hands-on role involves maintaining platforms, developing automation for issuance and renewal workflows, and performing certificate discovery and inventory enrichment. The engineer will also manage integrations across ServiceNow, cloud platforms, monitoring tools, and security systems while creating technical documentation and runbooks. Key responsibilities include incident investigation, problem management, and providing evidence for audit and compliance requests. Required skills include knowledge of TLS, SSL, certificate authorities, and cryptographic concepts. Technical proficiency in PowerShell, Python, APIs, Windows, Linux, and networking is essential. Preferred experience includes working with Keyfactor, DigiCert, or Microsoft ADCS to solve problems related to machine identity management and reducing operational friction across infrastructure and application teams.

What you'll do

  • Maintain enterprise PKI platforms and certificate lifecycle management systems.
  • Develop automation for certificate issuance, renewal, reporting, and remediation workflows.
  • Integrate PKI services with ServiceNow, cloud platforms, monitoring tools, and security systems.
  • Perform certificate discovery, inventory enrichment, ownership mapping, and remediation activities.
  • Manage machine identities and deployment patterns across infrastructure and application teams.
  • Create technical documentation, support procedures, and automation runbooks.
  • Investigate incidents and perform problem management to improve services.
  • Provide evidence for audit, compliance, and risk requests related to certificate management.

What we're looking for

  • 5+ years of experience in PKI, security engineering, infrastructure automation, or related technologies.
  • Working knowledge of TLS, SSL, certificate authorities, certificate lifecycle management, and basic cryptographic concepts.
  • Experience with scripting and automation using PowerShell, Python, APIs, or similar tools.
  • Familiarity with Windows, Linux, networking, and cloud environments.
  • Preferred experience with Keyfactor, DigiCert, Microsoft ADCS, or similar platforms.
  • Strong troubleshooting, documentation, and collaboration skills.
  • Ability to communicate clearly with technical teams, leadership, audit, and risk stakeholders.

More like this

Similar roles

PKI Network Engineer

Booz Allen Hamilton

Quantico, VA 58 days ago $69,400$158,000
PKI Certificate Authority Active Directory Windows Server PowerShell VMware SAN Cisco Juniper HSM Axway OCSP UNIX Linux BMC Remedy Network Engineering Load Balancing
4+ yrs exp

PKI Systems Engineer

General Dynamics

Washington, DC 79 days ago $157,250$212,750
PKI Certificate Management X.509 TLS/SSL OCSP CRLs Python PowerShell Scripting Automation Certificate Authorities Registration Authorities
5+ yrs exp Hybrid

Cryptographic Engineer

3M

Maplewood, MN +1 23 days ago $109,202$133,469
PKI Digital Certificates AWS Amazon Certificate Manager (ACM) AWS Key Management Service (KMS) Azure Key Vault Venafi Python PowerShell Cloud Security
6+ yrs exp Hybrid

Senior PKI Engineer

Booz Allen Hamilton

Laurel, MD +1 35 days ago $86,800$198,000
PKI IAM Zero Trust Python Perl Red Hat Certificate System Dogtag PKI EJBCA Java AWS ActivClient Single Sign-On Cloud Migration Web Servers Application Servers
5+ yrs exp

Identity Security PKI Engineer

Intel

Chandler, AZ 14 days ago $105,300$148,660
PKI X.509 OCSP Active Directory PAM Microsoft SQL Server HTML JavaScript JSP XML XSL DTD Windows UNIX Scripting Cyber Security Information Security Business Continuity Disaster Recovery
3+ yrs exp