Senior PKI Security Engineer
Capital OneAbout the role
Capital One is seeking a highly skilled and experienced Senior Public Key Infrastructure (PKI) Engineer for its Cyber organization. This individual will provide operational, engineering, and project support for an enterprise Entrust and EJBCA-based PKI environment. The role requires an expert in PKI operations, certificates, and encryption, with extensive experience supporting large-scale, complex environments. The ability to lead and coordinate team efforts within a geographically dispersed, virtual team is essential.
Key Responsibilities:
Lead or participate in complex or high-severity troubleshooting and incident resolution with infrastructure teams and vendors
Analyze, design, and implement PKI, certificate, and security solutions
Translate business needs into effective technology solutions for internal customers
Act as a project lead or team member on PKI, certificate, and security-related projects
Monitor and resolve all levels of PKI and Certificate incident queue issues
Create, review, approve, and implement changes to the PKI and Certificate environment
Analyze the current PKI and Certificate environment to identify and resolve technical and operational challenges
Lead complex PKI and Certificate incidents, changes, or upgrades
Represent the Crypto Services team on global incident management calls, interacting with technical teams, customers, and vendors
Analyze data and identify trends for root cause analysis and service improvement
Participate in capacity planning, performance monitoring, and maintenance to ensure high availability and proactively identify service improvement opportunities
Lead PKI and Certificate efforts for periodic disaster recovery exercises
Effectively communicate technical challenges to both technical and non-technical audiences
Participate in an off-hours on-call support rotation
Basic Qualifications:
High School Diploma, GED or equivalent certification
At least 3 years of Information Technology experience
At least 2 years of experience with Public Key Infrastructure (PKI) certificate
At least 2 years of experience with certificate management protocols
At least 2 years of experience with Online Certificate Status Protocol (OCSP) and Certificate Revocation Lists (CRLs)
Preferred Qualifications:
Bachelor's degree
AWS Certification
2+ years of experience in Python
3+ years of Entrust PKI experience
3+ years of Multi-Factor Authentication (MFA) experience
3+ years of UNIX experience
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
McLean, VA: $158,600 - $181,000 for Prin Assoc, Cyber Technical
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.
This role is also eligible to earn performance based incentive compensation, whicApply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s