Information Security Engineer (PKI/Systems)

Job Description Lumen Dynamics is seeking a Senior Identity & Encryption Engineer with deep expertise in Public Key Infrastructure (PKI), certificate lifecycle management, and enterprise secrets management . This is a senior engineering and advisory role for an experienced professional who has successfully designed, modernized, and automated enterprise cryptographic services across complex environments. The ideal candidate brings industry best practices gained from multiple enterprise implementations and can help clients evolve beyond traditional certificate management into modern, automated, API-driven security platforms. This individual will provide technical leadership, influence architecture decisions, and help establish scalable solutions that support long-term business and security objectives. Responsibilities Lead the design, modernization, and optimization of enterprise PKI and certificate management platforms. Provide technical leadership for certificate lifecycle management, secrets management, and cryptographic services across hybrid and cloud environments. Design and implement automated, scalable certificate provisioning and renewal processes using modern engineering practices. Develop self-service capabilities that enable development and infrastructure teams to securely request and provision certificates with minimal manual intervention. Design and implement API-driven integrations that enable CI/CD pipelines and DevOps platforms to securely interact with enterprise secrets management solutions. Maximize the value of existing security platforms by standardizing enterprise workflows, eliminating siloed solutions, and driving adoption of centralized services. Define engineering standards, best practices, and architectural patterns for PKI, certificate management, and secrets management. Serve as the senior technical escalation point for complex cryptographic platform issues and mentor engineering teams on automation and operational excellence. Contribute to platform hardening through secure configuration, delegation models, monitoring, patch management, and continuous optimization. Develop engineering roadmaps and implementation strategies aligned with client business objectives and evolving security requirements. Partner with cross-functional engineering, infrastructure, DevOps, security, and application teams to deliver scalable enterprise identity and encryption solutions. Evaluate emerging technologies and industry trends to ensure long-term platform sustainability and future readiness. Qualifications 7–10+ years of experience designing, implementing, and managing enterprise PKI, certificate lifecycle management, or cryptographic platforms. Deep expertise in PKI architecture, certificate management strategies, cryptographic services, and enterprise security best practices. 5+ years of engineering experience building automation solutions within Identity, Directory Services, or DevOps environments. Strong PowerShell scripting and automation experience. Experience designing and supporting Infrastructure as Code (IaC) and CI/CD pipelines. Experience integrating enterprise platforms through REST APIs and automation frameworks. Hands-on experience deploying, managing, and troubleshooting Hardware Security Modules (HSMs). Experience with cloud platforms including Azure, AWS, or Google Cloud, with strong knowledge of Azure Key Vault or equivalent cloud secrets management services. Demonstrated experience collaborating with cross-functional technical teams to deliver enterprise infrastructure and security solutions. Strong understanding of incident, problem, request, and change management processes. Excellent communication skills with the ability to engage technical teams, architects, project managers, and business stakeholders. Preferred Qualifications Experience administering and engineering Keyfactor Certificate Management Platform. Experience with HashiCorp Vault and CyberArk. Experience integrating enterprise secrets management platforms into DevOps and CI/CD workflows. Knowledge of modern zero-touch certificate lifecycle management and certificate-as-a-service architectures. Experience developing self-service platforms for identity, certificate, or secrets management. Consulting experience delivering enterprise security transformation initiatives across multiple clients or industries. Company Description Technology is our how. And people are our why. For over two decades, we have been harnessing technology to drive meaningful change. By combining world-class engineering, industry expertise and a people-centric mindset, we consult and partner with leading brands from various industries to create dynamic platforms and intelligent digital experiences that drive innovation and transform businesses. From prototype to real-world impact - be part of a global shift by doing work that matters. Additional Information Discover some of the global benefits that empower our people to become the best version of themse