Senior PKI Engineer (Cybersecurity)

Location: On-site in Southlake, Texas, United States

Salary: $135,000–$150,000 per year

Company

hirify.global provides financial services and operates a cybersecurity organization supporting enterprise security and risk reduction.

What you will do

• Architect, deploy, maintain, and enhance enterprise PKI infrastructure, including Certificate Authorities, Registration Authorities, Hardware Security Modules, and certificate services.
• Manage certificate issuance, renewal, revocation, and lifecycle processes for users, servers, applications, services, and devices.
• Design and build automation that improves PKI reliability, reduces manual effort, and scales certificate lifecycle management.
• Integrate PKI with authentication, access control, applications, infrastructure platforms, developer workflows, and enterprise security systems.
• Assess PKI systems for trust failures, certificate risks, validation gaps, vulnerabilities, operational risks, and outage exposure.
• Lead complex cybersecurity initiatives from design through delivery and collaborate with cybersecurity, infrastructure, application, data protection, developer, and engineering teams.

Requirements

• 5+ years of hands-on experience in network security, data security, PKI, certificate management, or related cybersecurity technologies.
• Strong knowledge of PKI principles, certificate lifecycle management, trust chains, validation, renewal, revocation, and common failure modes.
• Experience with enterprise PKI technologies such as Microsoft AD CS, Entrust, Venafi, or comparable commercial solutions.
• Experience with certificate lifecycle automation using Venafi, PowerShell, and Python; GitHub and .NET experience are highly desired.
• Experience working with HSMs, software engineering, automation at scale, and PKI integrations with authentication, access control, applications, or infrastructure.
• Strong communication skills and experience delivering high-impact cybersecurity projects with cross-functional teams; a bachelor's degree in computer science or a related field is highly preferred.

Nice to have

• Certifications such as CISSP, GIAC, CISM, CCSP, CISA, Security+, or related credentials.
• Experience with secure SDLC, threat modeling, vulnerability remediation, application security, or platform security engineering.
• Knowledge of identity, authentication, access management, trust engineering, AI-assisted development, or AI security controls.

Culture & Benefits

• Regular in-person collaboration in an on-site work environment.
• 401(k) with company match and an employee stock purchase plan.
• Paid vacation, volunteering time, parental leave, and family-building benefits.
• Twenty-eight-day sabbatical after every five years of service for eligible positions.
• Tuition reimbursement and medical, dental, and vision insurance.