Senior PKI Engineer (Cybersecurity)

Location: On-site in Southlake, Texas, or Phoenix, Arizona

Salary: USD $145,000–$190,000 per year

Company

hirify.global is a financial services company with a cybersecurity organization responsible for protecting enterprise systems and data.

What you will do

• Architect, deploy, maintain, and enhance enterprise PKI infrastructure, including CAs, RAs, HSMs, and certificate services.
• Manage certificate issuance, renewal, revocation, and lifecycle processes for users, servers, applications, services, and devices.
• Design automation using software engineering principles to improve PKI reliability, reduce manual effort, and scale certificate management.
• Integrate PKI with authentication, access control, applications, infrastructure platforms, developer workflows, and security systems.
• Identify trust failures, certificate risks, validation gaps, automation issues, vulnerabilities, and outage risks through assessments and audits.
• Lead complex cybersecurity initiatives from design through delivery while partnering with infrastructure, application, developer, data protection, and engineering teams.

Requirements

• 5+ years of hands-on experience in network security, data security, PKI, certificate management, or related cybersecurity technologies.
• Strong understanding of PKI principles, certificate lifecycles, trust chains, validation, renewal, revocation, and failure modes.
• Experience with enterprise PKI solutions such as Microsoft AD CS, Entrust, Venafi, or comparable platforms.
• Experience with certificate lifecycle automation using Venafi, PowerShell, and Python; GitHub and .NET experience are highly desired.
• Experience with HSMs, reliable automation or service development at scale, and PKI integrations with identity and security systems.
• Bachelor’s degree in computer science or a related field is highly preferred; strong communication and cross-functional delivery skills are required.

Nice to have

• Cybersecurity or data protection certifications such as CISSP, GIAC, CISM, CCSP, CISA, or Security+.
• Experience with secure SDLC, threat modeling, vulnerability remediation, application security, or platform security engineering.
• Familiarity with identity, authentication, access management, AI-assisted development, or AI security controls.

Culture & Benefits

• In-office collaboration is expected for this role.
• Health, dental, and vision insurance.
• 401(k) with company match and employee stock purchase plan.
• Paid vacation, volunteering time, parental leave, and family-building benefits.
• Tuition reimbursement and a 28-day sabbatical after every five years of service for eligible positions.