Quincy or Berwyn or Princeton or Clifton or Austin
$90k-$158k/yrOnsiteFull Time
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
3+ YOE3+ years PKI/security engineering or infrastructure automation experience; knowledge of TLS/SSL, certificate lifecycle, scripting/automation, integrations, and troubleshooting.
ServiceNow, PowerShell, Python, APIs, Keyfactor, DigiCert, Microsoft ADCS, Windows, Linux
Fort Meade or Mechanicsburg or Oklahoma City or San Antonio or Ford Island or Scott Air Force Base or Hill Air Force Base
$87k-$198k/yrOnsiteFull Time
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
5+ YOERequires 5+ years in cybersecurity, 3+ years with Active Directory Certificate Services, PKI, certificate authorities, lifecycle automation, Linux, cryptography, Secret clearance, and high school diploma or GED.
Public Key Infrastructure (PKI), Active Directory Certificate Services, Linux, Keyfactor, Venafi, ACME, SCEP
DTCC: Provides post-trade infrastructure for the global financial services industry
10+ YOEMinimum 10 years of related experience; bachelor's degree preferred or equivalent experience; deep PKI, certificate authority, cryptographic protocol, trust architecture, cloud security, and enterprise security architecture expertise.
Public Key Infrastructure (PKI), Post-quantum cryptography (PQC)
Freddie MacOTCQB: FMCC: Purchases and securitizes home mortgages for the secondary market.
5+ YOERequires 5+ years in PKI and cryptography, 5–7+ years in IT security, Linux and Windows operations, security controls, cloud security, automation, troubleshooting, and cross-functional collaboration.
Amatriot Group: Provides IT consulting and mission-critical technology support services.
10+ YOE10+ years IT infrastructure experience, 3+ years PKI experience, expertise in cryptography, certificate lifecycle management, automation, Linux/Windows platforms, scripting, and compliance-focused design.
PKI, TLS, PGP, HSM, Active Directory, Linux, Microsoft Windows Server, Python, PowerShell, Bash, KornShell, Venafi, Keyfactor, Entrust, Ansible, Puppet, Terraform, IBM TIM, IBM TAM, Red Hat Identity Management, RHV, Satellite, RHDS, Ceph, AWS, EC2, S3, Lambda, RDS, ALB, NLB, Scrum, Kanban
Ohio or Austin or Chicago or Charlotte or Detroit or Dallas or Atlanta
$70k-$140k/yrRemoteFull Time
HuntingtonNASDAQ: HBAN: Provides regional commercial, consumer, and mortgage banking services.
6+ YOEAssociate degree or equivalent experience; 6+ years in Workday HCM information security, IAM, requirements gathering, and delivery. Knowledge of SSO, MFA, AD, PKI, privileged accounts, and APIs.
Workday HCM, Workday Financial, SailPoint, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Active Directory (AD), Public Key Infrastructure (PKI), Application Programming Interface (API)
Seattle or Cottonwood Heights or San Francisco or New York City or Frisco
$154k-$264k/yrOnsiteFull Time
SoFiNasdaq: SOFI: Mobile-first platform for banking, lending, and investment services.
8+ YOE8+ years in security engineering or applied cryptography; expertise in post-quantum cryptography, crypto-agility, key management, PKI, HSMs/KMS, cloud cryptographic controls, and strong communication skills.
NTT DATA: Global provider of IT and business consulting services.
10+ YOERequires 10+ years in IAM architecture or senior technical delivery, SailPoint and CyberArk experience, Entra ID expertise, PKI knowledge, identity protocols, automation tools, ITSM, and CI/CD integration.
Riverwoods or Richmond or San Jose or Plano or New York City or McLean
$179k-$246k/yrOnsiteFull Time
Capital OneNYSE: COF: A diversified financial services providing banking and credit products.
4+ YOERequires a high school diploma or GED and 4+ years in cloud, security cryptographic engineering, Agile security projects, PKI, key management, and certificate lifecycle processes; bachelor's degree and additional experience preferred.
AWS, Microsoft Azure, Google Cloud Platform, AWS Lambda, Python, CloudWatch, GuardDuty, Macie, Config, CloudTrail, Terraform, AWS CloudFormation, PKI
6+ YOE2+ MgmtRequires 6+ years in IAM or security engineering, 2–3+ years leading teams, Microsoft Entra ID expertise, workload identity, PKI, mTLS, zero trust, PAM, and strong communication skills.
SpaceX: Designs and launches advanced rockets and satellite internet constellations.
2+ YOEBachelor's degree in a STEM field or 2+ years info security experience; experience with Linux/Windows/macOS internals, scripting (Bash, Python, PowerShell), ticket queue management, YubiKeys, SSH, PKI, and malware analysis.
EY: Global firm providing audit, tax, and professional consulting services.
10+ YOEBachelor's degree and ~10+ years IAM experience; leadership in IAM projects, knowledge of directory services, SAML/LDAP/PKI, ServiceNow/ITSM/ITIL v3; willingness to travel; certifications (CISSP/CISM/CCSP/CISA) desired.
Washington or Tampa or San Antonio or Colorado Springs or Norfolk
HybridFull Time
Lastwall: Provides identity-centric cybersecurity solutions for defense and government organizations.
7+ YOEActive TS/SCI clearance,7+ years defense/federal/cybersecurity or technical sales experience,prior U.S. military or DoW experience,ICAM/Zero Trust/PKI knowledge,ability to lead demos,deployments,and product feedback.
AppViewX: Automates certificate lifecycle management and machine identity security.
2+ YOERequires 2–4 years in solutions or sales engineering within enterprise cybersecurity software, PKI/CLM knowledge, cloud platform familiarity, communication skills, a bachelor's degree or equivalent, and Texas residency with 25–35% regional travel.
PKI, Certificate Lifecycle Management (CLM), AWS, Microsoft Azure, Google Cloud Platform, Venafi, Keyfactor, DigiCert, Sectigo, Entrust, Microsoft ADCS, EJBCA, Kubernetes, cert-manager, OpenShift, Bash, PowerShell, Python, ACME, SCEP, EST, ML-KEM, ML-DSA, FIPS 204, FIPS 203, FIPS 205
MGM Resorts InternationalNYSE: MGM: Operates destination resorts, luxury hotels, casinos, and global entertainment venues.
5+ YOE5+ years IAM experience; Bachelor's degree or equivalent experience; experience with SailPoint/Okta/Azure AD/BeyondTrust; PKI, SAML/OAuth/OIDC, LDAP/Kerberos; SQL scripting; Jenkins/Ansible familiarity; industry certifications (CISM/CISSP/CCSP) preferred.
Diamondback EnergyNASDAQ: FANG: Explores and produces oil and natural gas reserves.
5+ YOEBachelor's or equivalent experience, 5+ years hands-on F5 BIG-IP administration, experience with LTM/APM/WAF/DNS, F5 Distributed Cloud, TCP/IP, HTTP/S, DNS, SSL/TLS/PKI, and automation using Ansible, Terraform, and REST APIs.