PKI Senior Security Engineer

Position Description:

The PKI Engineer is responsible for designing operating and enhancing the enterprise Public Key Infrastructure (PKI) and certificate management services. This role ensures secure authentication encryption and certificate lifecycle management across enterprise systems supporting regulatory compliance and operational stability.
This position plays a critical role in scaling PKI services driving automation and reducing operational risk associated with certificate expiration trust store management and cryptographic operations.
YOUR RESPONSIBILITIES IN THIS ROLE: Eastern Time Zone (ET)1. PKI Infrastructure & Operations (Onprem and Cloud (AWS & Azure )


. Maintain and operate PKI platforms including Certificate Authorities (CAs) HSMs and certificate management systems
. Ensure availability resiliency and patching of PKI infrastructure
. Support certificate issuance renewal revocation and lifecycle management

2. Certificate Lifecycle Management


. Manage large scale certificate environments across applications and infrastructure
. Ensure timely renewal and replacement of certificates
. Support trust store management and certificate chain integrity

3. Automation & Integration


. Build and implement automation for certificate lifecycle management
. Integrate PKI services with enterprise platforms (CI/CD pipelines cloud services applications)
. Deploy and operationalize tools such as connectors and automation pipelines

4. Governance Standards & Policy Enforcement


. Enforce security policies related to certificate usage and cryptography
. Define and maintain standards for certificate issuance validity and usage
. Support compliance with regulatory frameworks (e.g. NIST CMMC PCI TSA directives)

5. Cross Team Collaboration


. Partner with application and infrastructure teams to enable certificate automation
. Provide guidance and supporting tooling while ensuring clear ownership boundaries
. Assist teams with onboarding to PKI services and automation

6. Risk Reduction & Incident Support


. Identify and remediate risks related to certificate expiration misconfiguration or trust failures
. Support incident response involving certificate or encryption issues
. Improve visibility and reporting for certificate health and compliance

7. Emerging Crypto & Future Readiness


. Support adoption of new cryptographic standards (e.g. post quantum cryptography)
. Assist in modernization of PKI architecture and tooling
. Evaluate new solutions for scalability and resilience

Skills:

• Active Directory Security
• Amazon Web Services Cloud
• Certificate Lifecycle Mgt(CLM)
• Public Key Infrastructure
• Communication

What you can expect from us:

Together as owners lets turn meaningful insights into action.

Life at CGI is rooted in ownership teamwork respect and belonging. Here youll reach your full potential because

You are invited to be an owner from day 1 as we work together to bring our Dream to life. Thats why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our companys strategy and direction.

Your work creates value. Youll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas embrace new opportunities and benefit from expansive industry and technology expertise.

Youll shape your career by joining a company built to grow and last. Youll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our teamone of the largest IT and business consulting services firms in the world.