Software Engineering PMTS, Enterprise PKI

What you'll do

• Architect and lead the implementation of EJBCA-based PKI infrastructure including CA hierarchies, OCSP responders, and CRL distribution.
• Design and deliver a scalable nextGen PKI platform across hybrid cloud environments to ensure security and compliance.
• Implement modern certificate enrollment protocols such as ACME, EST, CMP, and REST-based APIs for automated management.
• Build automation frameworks and APIs for certificate provisioning, renewal, revocation, monitoring, and audit logging.
• Expand PKI capabilities into new use cases including IoT device identity, mTLS, and Post-Quantum Cryptography readiness.
• Integrate certificate-based authentication across enterprise platforms, CI/CD pipelines, and cloud infrastructure.
• Provide technical leadership and mentorship to engineers on cryptographic protocols and secure coding practices.
• Lead incident response and root cause analysis for PKI-related outages or certificate trust failures.

What we're looking for

• You must have 10+ years of experience in enterprise-scale PKI design and operations.
• You must have hands-on expertise with EJBCA or comparable CA/RA platforms like ADCS, Dogtag, or Vault PKI.
• You must possess a deep understanding of X.509 certificates, asymmetric cryptography, trust chains, CRLs, and OCSP.
• You must have experience designing certificate lifecycle automation and modern enrollment protocols such as ACME, EST, CMP, and REST APIs.
• You must have experience with cloud-native PKI in AWS, Azure, or GCP environments.
• You must be proficient in programming languages including Golang and Python.
• You must demonstrate an AI-first engineering approach using tools like GitHub Copilot or Claude Code with advanced prompt engineering skills.
• You must hold a Bachelor's or Master's degree in Computer Science, Engineering, Cybersecurity, or a related field.