Mastech Digital · 6 hours ago
PKI Engineer
United States
Contract
Remote
Mid, Senior Level
3+ years expMastech Digital is seeking an experienced Public Key Infrastructure (PKI) Engineer for a hands-on technical role. The successful candidate will be responsible for the end-to-end implementation, deployment, and management of highly available PKI solutions for clients, focusing on integrations with enterprise applications and machine identity management.
Information Technology
Hiring Manager
Smriti Sinha
Responsibilities
Design, deploy, configure, and manage highly available PKI solutions, with a primary focus on the Venafi Trust Protection Platform and DigiCert One within the client's environment
Integrate PKI and certificate management solutions with a wide variety of the client's enterprise applications, cloud services, and DevOps pipelines
Develop and implement strategies for effective machine identity and key lifecycle management, including discovery, creation, distribution, rotation, and revocation of cryptographic keys and digital certificates
Configure, deploy, and manage Hardware Security Modules (HSMs) to secure critical cryptographic keys
Implement and manage secure code signing processes to ensure the integrity and authenticity of the client's software
Act as the subject matter expert for PKI-related issues, providing advanced troubleshooting for certificate-related incidents and integration failures
Ensure that all PKI configurations and integrations adhere to the client's security standards and compliance requirements (e.g., NIST, ISO 27001)
Work closely with client application owners, security architects, project managers, and other stakeholders to gather requirements and deliver robust PKI solutions
Create and maintain detailed documentation of the PKI architecture, configurations, integrations, and operational processes for project deliverables
Act with integrity, professionalism, and personal responsibility to uphold the firm’s respectful and courteous work environment
Qualification
Required
Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical
Minimum of 3-5 years of hands-on experience with enterprise PKI solutions, with a demonstrated focus on certificate and machine identity lifecycle management
Specific, deep expertise with Venafi and DigiCert One is mandatory
Strong understanding of cryptographic concepts, PKI, and machine identity management principles
In-depth knowledge of cryptographic protocols (TLS/SSL, S/MIME), certificate enrollment protocols (SCEP, EST), and directory services (Active Directory, LDAP)
Proven experience with integrating PKI solutions into enterprise applications, cloud platforms (AWS, Azure), and CI/CD pipelines
Familiarity with Hardware Security Modules (HSMs)
Proficiency in PowerShell or other scripting languages for automation is necessary
Excellent analytical and problem-solving skills, with the ability to troubleshoot complex technical issues in a project-based environment
Strong written and verbal communication skills, with the ability to articulate complex technical concepts to both technical and non-technical stakeholders
Preferred
Experience working in a professional services or consulting environment on client-facing projects
Familiarity with other PKI and security tools (e.g., Microsoft AD CS, HashiCorp Vault, CyberArk)
Relevant industry certifications (e.g., CISSP, CISM, or vendor-specific credentials)
Understanding of ITIL processes for incident, change, and problem management
Company
Mastech Digital
Mastech Digital provides IT associates in digital and mainstream technologies, Digital Transformation Services around Salesforce.com and SAP
1001-5000 employees
H1B Sponsorship
Mastech Digital has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (399)
2024 (496)
2023 (540)
2022 (947)
2021 (681)
2020 (751)
Funding
Current Stage
Public CompanyTotal Funding
unknown2008-09-26IPO
Leadership Team
Ashok Trivedi
Co-Founder & Co-Chairman
Recent News
2025-11-13
2025-11-03
2025-08-13
Company data provided by crunchbase