Join a high-impact security engineering team focused on strengthening enterprise certificate and Public Key Infrastructure (PKI) services for a large, complex environment. This role is ideal for someone who enjoys improving resilience, driving automation, and partnering across teams to support secure authentication, encryption, and certificate lifecycle management.

Responsibilities

• Design, operate, and improve PKI and certificate management services to support secure enterprise operations
• Help ensure infrastructure availability, resiliency, and timely patching of security platforms
• Manage certificate issuance, renewal, revocation, and lifecycle activities across applications and infrastructure
• Support trust store maintenance, certificate chain integrity, and large-scale certificate environments
• Build automation and tooling to streamline certificate lifecycle processes and reduce manual effort
• Integrate PKI services with CI/CD pipelines, cloud services, and enterprise applications
• Deploy and support tools and connectors that enable scalable certificate operations
• Help define and maintain standards for certificate usage, validity, and cryptographic requirements
• Partner with technical teams to onboard applications and improve ownership and support models
• Identify and address risks related to expiring certificates, misconfigurations, and trust issues
• Support incident response efforts involving encryption, certificates, or related security concerns
• Improve reporting and visibility into certificate health, compliance, and operational status
• Contribute to modernization efforts for PKI architecture, tooling, and emerging cryptographic practices
• Evaluate solutions that improve scalability, resilience, and security outcomes

Skills

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience
• 3–7+ years of experience in PKI, cybersecurity engineering, or infrastructure security
• Hands-on experience with certificate lifecycle management
• Experience with PKI platforms and tools such as Venafi, DigiCert, Microsoft CA, or AWS ACM
• Strong understanding of TLS/SSL, cryptographic principles, and key management
• Experience with HSMs and key custody operations
• Ability to develop automation using APIs, scripting, or pipeline-based workflows
• Working knowledge of cloud certificate services in AWS or Azure
• Familiarity with compliance frameworks such as NIST, PCI-DSS, CMMC, or TSA-related requirements
• Experience supporting PKI at scale in enterprise environments
• Understanding of trust store management across distributed systems
• Strong troubleshooting, communication, and collaboration skills

Preferred Skills

• Experience supporting modernization or automation initiatives within PKI or security engineering
• Familiarity with post-quantum cryptography concepts and adoption planning
• Experience working with security policies, standards, and operational governance
• Ability to document processes, create technical reports, and support cross-functional teams
• Background in vulnerability testing, risk analysis, or security assessments

Horizontal is committed to building an inclusive and welcoming environment where different perspectives are valued and everyone has the opportunity to contribute and succeed. We encourage candidates from all backgrounds to apply and welcome applicants who share a commitment to equity, collaboration, and respect.