PKI Engineer

Role Overview

This position focuses on supporting and refining enterprise Public Key Infrastructure (PKI), certificate lifecycle management, and machine identity services. The engineer will work under senior PKI leadership to automate, integrate, and enhance platforms and processes related to certificates, aiming to decrease operational complexity.

Key Responsibilities

• Maintain and engineer enterprise PKI and related certificate lifecycle platforms.
• Create and sustain automation for tasks such as certificate issuance, renewal, reporting, and remediation workflows.
• Facilitate integration of platforms with ServiceNow, cloud environments, monitoring systems, and security frameworks.
• Manage activities related to certificate discovery, inventory enrichment, ownership mapping, and remediation.
• Oversee machine identity management and certificate deployments across infrastructure and application teams.
• Develop and maintain technical documentation, process support guides, and automation runbooks.
• Contribute to testing, deployment, and operational transition of engineering modifications.
• Engage in incident analysis, problem management, and continuous service enhancement efforts.
• Assist with audit, compliance, and risk assessment evidence related to PKI and certificate management.

Desired Qualities

• Strong sense of ownership with ability to coordinate execution across multiple groups.
• Focus on minimizing risks, simplifying operations, implementing automation, and delivering measurable results.
• Effective communicator with technical teams, leadership, and governance stakeholders.

Qualifications

• Minimum three years’ experience in PKI, security engineering, infrastructure automation, or related fields.
• Understanding of TLS, SSL, certificate authorities, certificate lifecycle processes, and cryptographic fundamentals.
• Proficiency in scripting or automation using PowerShell, Python, APIs, or equivalent technologies.
• Familiar with Windows, Linux, networking, and cloud ecosystems.
• Preferred experience with Keyfactor, DigiCert, Microsoft ADCS, or similar platforms.
• Strong troubleshooting skills, thorough documentation practices, and capability to collaborate effectively.

Salary and Benefits

The annual compensation for this role ranges from $90,000 to $157,500 depending on location. Employees also gain access to a comprehensive benefits package, including retirement savings plans with company match, various insurance options (life, medical, dental, vision, disability), paid leaves (vacation, sick, family care), an Employee Assistance Program, performance-based incentives (excluding some sales roles), and tax-advantaged savings accounts.

Company Overview

State Street is a global financial services firm supporting institutional investors with risk management, performance optimization, and operational responses. The company values an inclusive workplace fostering each employee's growth through opportunities, flexible work support, community engagement, and employee networks.

Equal Opportunity Employer Statement

Applications are considered without regard to any legally protected characteristics including race, ethnicity, gender, disability, veteran status, and more. The company promotes a diverse and inclusive environment.

Additional Information

• Job ID: R-795002
• Location: Kilkenny, Ireland
• Employment Type: Full-time, Onsite
• Law Notice: Lie detector tests are prohibited as a condition of employment in Massachusetts.