Principal PKI Engineer

Principal Pki Engineer

An amazing career opportunity for a Principal PKI Engineer! Location: Salt Lake City, Utah. As a Principal PKI Engineer, you will lead the architecture, implementation, and operations of our Public Key Infrastructure as a Service (PKIaaS) platform. This role is critical to the secure issuance and lifecycle management of digital certificates in a multi-tenant, cloud-first environment. You will design and maintain scalable certificate hierarchies, manage HSMs and cryptographic assets, perform key ceremonies, and advise on cryptographic and operational best practices. Experience with cloud computing in AWS is essential. You will act as a senior technical authority, guiding the secure issuance, renewal, and revocation of certificate authorities and end user certificates, ensuring CA key material integrity, and mentoring supporting engineers and administrators. You'll collaborate across security, infrastructure, compliance, and product teams to ensure that cryptographic trust is embedded and maintained throughout the service offering.

HID Global powers the trusted identities of the world's people, places, and things, allowing people to transact safely, work productively and travel freely. We are a high-tech software company headquartered in Austin, TX, with over 4,500 worldwide employees.

At HID Global, we understand that no person, device, or workplace can go unprotected. This philosophy of Zero Trust drives us to create new advances in risk-based multi-factor authentication, leads us to secure user identities in converged access environments and drives the need to expand implementations with our industry-leading digital certificates and PKIaaS solution to manage them at scale.

Are you ready to make a difference? Join us and help shape the future of security. As our Principal PKI Engineer, you'll support HID's success by:

• Designing and implementing PKI hierarchies (Root, Intermediate, Issuing CAs) to support multi-tenant internal and external PKIaaS customers.
• Deploying and operating PKI services in AWS, using services such as ECS, EKS, EC2, VPC, CloudWatch, S3, etc.
• Performing and leading key ceremonies, maintaining strict procedural integrity in accordance with policy, compliance, and regulatory requirements.
• Configuring and maintaining HSMs for secure storage of private keys and key material backup/recovery.
• Overseeing the deployment, configuration, and operational lifecycle of CA software platforms (e.g., EJBCA, Microsoft ADCS, etc.).
• Setting up and monitoring Certificate Revocation Lists (CRLs) and Online Certificate Status Protocol (OCSP) responders for high availability and low latency.
• Developing and maintaining Business Continuity and Disaster Recovery (BCP/DR) plans for PKI infrastructure, including multi-region failover strategies in AWS.
• Implementing PKI operational and security best practices, including role-based access controls, audit logging, and secure key lifecycle management.
• Providing guidance on certificate issuance policies, trusted root management, code signing, S/MIME, and TLS authentication practices.
• Collaborating with internal teams and external stakeholders to define PKI requirements and guide integration with enterprise systems, cloud platforms, and DevOps pipelines.
• Defining and enforcing PKI operational and security best practices, policies, and SOPs.

HID Global is an Equal Opportunity/Affirmative Action Employer -- Minority/Female/Disability/Veteran/Gender Identity/Sexual Orientation.