Staff Infosec Engineer

About the Role Job Description Summary
PKI /PAM Engineer is responsible for designing, implementing, and managing PKI infrastructure, including the issuance, renewal, and revocation of digital certificates. The PKI/PAM Engineer will also be responsible for utilizing Secrets management tools in accordance with established policies and industry standards for Privileged Access Management (PAM), ensuring secure handling and compliance with best practices. The engineer will work closely with product teams to develop tailored PKI solutions for secure communication and data protection throughout the development lifecycle. What Youll Do

• Expertise in working with various certificate formats (PEM, DER, PFX, JKS).

• Familiarity with Cloud Providers, particularly Azure, to integrate PAM and Secrets Management solutions into cloud-based environments.

• Good to have knowledge on container orchestration tools like Kubernetes.

• Ability to write custom scripts (Shell, Python) leveraging APIs for automating PAM tasks such as account onboarding, privileged access management, and integration with other tools.

• Solid understanding and Hands-on experience of configuration management tools like Chef and DevOps principles, including Source Code Management (SCM) using tools like GitHub, and continuous integration solutions such as Jenkins, and GitHub Actions.

• Experience with REST APIs for integration of certificate management systems.

• Solid understanding of digital signatures, encryption, and public-key cryptography principles.

• Expertise in Secrets Management tools, with a focus on HashiCorp Vault or similar products, including integrating it into DevOps workflows for managing credentials, certificates, SSH keys, API keys etc.

• Experience with Delinea Secret Server or similar products is a plus

• Ability to design and implement security solutions based on PAM and Secrets Management tools tailored to product team needs.

• Proficient in managing Windows and Linux servers, particularly in relation to Secrets management implementations and access control.