HireArt is helping an on-demand, autonomous ride-hailing company hire a Security Engineer (PKI) to create ways to deploy certificates for multiple use cases and improve the security posture surrounding machine identities across its hybrid environment.
In this role, you will work with cross-functional teams gathering internal requirements, developing solutions to simplify processes for machine-to-machine authentication, and helping with the operational maintenance of the HSM and certificate authority services.
We're looking for someone with 4+ years of experience in performing certificate authority maintenance tasks (e.g. certificate renewals and template generation). You have the ability to hit deadlines while taking on challenges and new roles.
As a Security Engineer (PKI), you will:
- Work with developers and engineers to improve security with X.509 certificates and SSH certificates and resolve vulnerabilities in existing code while prioritizing stability, security, and simplicity.
- Communicate and collaborate with other teams, both technical and non-technical.
- Continuously review and evaluate the security settings and configuration of the PKI infrastructure, apply possible enhancements, and propose appropriate security tools.
- Define, design, and develop pipelines to improve PKI procedures through automation.
- Propose and implement solutions to unify security policies onsite and across hybrid Cloud environments.
- Build scalable cryptographic systems that support NIST, FIPS, SOX, and HIPAA compliance requirements for X.509 and key management services.
- 4+ years of experience in performing certificate authority maintenance tasks (e.g. certificate renewals and template generation)
- Experienced with the following:
- Microsoft PKI, PrimeKey PKI, AWS Private CA, and Hardware Security Module (HSM) configuration and operation
- Deep knowledge of integrating workflows with Hashicorp Vault
- A deep understanding of digital certificate lifecycle management functions and broad experience with different certificate types and uses
Preferred qualifications:
- Infrastructure as Code (IaC) experience (Terraform, Bamboo, Salt)
- Experienced in Golang
- Experienced with Docker, containerization, microservices, ECS, Kubernetes, and CloudHSM
- Experience with Clearpass
Benefits:
- Pre-tax commuter benefits
- Employer (HireArt) Subsidized healthcare benefits
- Flexible Spending Account for healthcare-related costs
- HireArt covers all costs for short and long term disability and life insurance
- 401k package
Commitment: This is a full-time, 6-month contract position staffed via HireArt. It will be onsite and available to candidates who are local to the Foster City, CA area.
HireArt values diversity and is an Equal Opportunity Employer. We are interested in every qualified candidate who is eligible to work in the United States. Unfortunately, we are not able to sponsor visas or employ corp-to-corp.