Sr. Security Engineer

Horizontal Talent is hiring a Senior Security Engineer to support enterprise certificate and cryptographic services in an onsite role based in Atlanta, GA. In this position, you will help strengthen the organization’s PKI infrastructure by improving certificate lifecycle automation and maintaining secure, reliable operations across applications and platforms.

What you’ll do

• Support the daily operation, availability, resiliency, and patching of PKI infrastructure
• Own certificate lifecycle activities including issuance, renewal, and revocation
• Maintain certificate inventories across applications and infrastructure to reduce expiration risk and trust-related incidents
• Build and enhance automation for certificate management using APIs, pipelines, and scripting and related tooling
• Integrate PKI capabilities with enterprise systems, including CI/CD workflows, cloud services, and application platforms
• Help establish and enforce standards for certificate usage, cryptography, and related security policies
• Work with cross-functional partners to support PKI onboarding, tooling adoption, and clear ownership practices
• Assist with incident response and remediation for issues related to certificates, encryption, and trust chain problems
• Support reporting, visibility, and compliance efforts tied to certificate health and security controls
• Contribute to modernization by evaluating emerging cryptographic approaches and tools

What you bring

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)
• 3–7+ years of experience in PKI, cybersecurity engineering, or infrastructure security
• Hands-on experience with certificate lifecycle management
• Working knowledge of PKI platforms and tools such as Venafi, DigiCert, Microsoft CA, or AWS ACM
• Strong understanding of TLS/SSL, cryptographic fundamentals, and key management practices
• Ability to collaborate across teams and communicate technical concepts clearly
• Strong attention to detail and a commitment to secure, reliable operations

Technologies you may work with

• Venafi, DigiCert, Microsoft CA, AWS ACM
• TLS/SSL, CI/CD, HSMs
• AWS, Azure
• NIST, PCI-DSS, CMMC

Preferred skills

• Experience with HSMs and key custody operations
• Background in PKI automation through scripting, APIs, or pipeline-based workflows
• Experience supporting cloud certificate services such as AWS or Azure
• Knowledge of compliance frameworks including NIST, PCI-DSS, or CMMC
• Experience supporting PKI at scale in large enterprise environments
• Familiarity with trust store management across distributed systems