Cloud Engineer

Total Number of Openings

Chevron is accepting online applications for the Cloud Engineer position through August 26 2026 at 11:59 p.m. (Central Time).

Overview

This is a senior hands-on engineering role within Chevrons Digital Identity organization responsible for designing operating and modernizing enterprise-scale Public Key Infrastructure (PKI) and cryptographic services across cloud and hybrid environments. The role enables secure certificate lifecycle management key protection and identity-driven security controls supporting Zero Trust adoption phishing-resistant authentication and protection of critical business workloads.

Responsibilities for this position may include but are not limited to:

• PKI & Certificate Services

• Design deploy and manage enterprise PKI platforms (Microsoft ADCS DigiCert NDES cloud-integrated services)

• Own certificate lifecycle management (issuance renewal revocation compliance automation)

• Implement post-quantum cryptography capabilities aligned to business and regulatory requirements

• Manage HSM-backed key protection and integration with key management systems

• Cloud & Hybrid Identity Integration

• Integrate PKI with Active Directory and Microsoft Entra ID for hybrid identity scenarios

• Enable certificate-based authentication for workloads APIs devices VPN and service accounts

• Align PKI services with Azure and multi-cloud security architectures

• Security Engineering & Zero Trust

• Implement phishing-resistant authentication using FIDO2 PIV and certificate-based methods

• Support Conditional Access policies leveraging identity device posture and risk signals

• Advance Zero Trust maturity and continuous security posture improvement

• Privileged Access & Operational Security

• Integrate PKI with PAM solutions (e.g. Delinea) for secure service account authentication

• Support privileged access workstations and hardened admin environments

• Lead break-glass and recovery scenarios using secure access controls

• Automation Reliability & Operations

• Drive automation using scripting APIs and orchestration to reduce manual processes

• Lead disaster recovery exercises upgrades and PKI platform modernization

• Provide advanced engineering support incident response and root cause analysis

• Leadership & Stakeholder Engagement

• Serve as a PKI subject matter expert within Digital Identity Protection

• Collaborate across security cloud and operations teams

• Mentor engineers and contribute to standards and operational excellence

Required Qualifications:

• Bachelors degree in computer science Information Security Engineering or related field (or equivalent experience)

• 1215 years in Identity & Access Management PKI or security infrastructure engineering

• Proven experience operating large-scale enterprise PKI environments

• Strong understanding of cryptography authentication and trust models

• Hands-on expertise with PKI platforms HSM key management automation Active Directory and Microsoft Entra ID

Preferred Qualifications:

• Industry certifications in security or cloud (e.g. CISSP Azure Security)

• Experience in regulated industries such as oil & gas or energy

• Knowledge of Zero Trust architecture Conditional Access and identity security engineering

• Familiarity with ITIL and operational processes in regulated environments

U.S. Regulatory notice:

Chevron is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religious creed sex (including pregnancy) sexual orientation gender identity gender expression national origin or ancestry age mental or physical disability medical condition reproductive health decision-making military or veteran status political preference marital status citizenship genetic information or other characteristics protected by applicable law.

We are committed to providing reasonable accommodations for qualified individuals with disabilities. If you need assistance or an accommodation please email us at .

Chevron participates in E-Verify in certain locations as required by law.