PKI, HSM & Certificate Services Sr. Engineer
Solventum CorporationMatch Score
Against your primary resumeLogin to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Protocol Intelligence
Data-driven signals on your job's competitivenessNiche PKI/HSM skillset reduces applicant density despite metro location and known brand.
Highly domain-specific PKI, HSM, and certificate management skills limit cross-industry transferability.
Mandatory 7 years plus 5+ years hands-on PKI/HSM and Keyfactor/Thales expertise makes filters strict.
Job Description
Structured overview of role & requirementsAbout This Role
Design, implement, and manage enterprise PKI solutions including Microsoft ADCS and Keyfactor platforms across global environments.
Administer Thales Luna HSM platforms and manage full certificate lifecycle including issuance, renewal, revocation, and automation for internal and external certificates.
Troubleshoot complex PKI, TLS/SSL, code-signing, cryptographic issues, and ensure compliance with industry security standards and regulatory requirements.
Minimum Requirements
Bachelor’s Degree or higher.
7+ years of enterprise PKI, certificate management, HSM, cryptography, or infrastructure security experience.
5+ years hands-on in enterprise PKI or certificate management including administration of Microsoft ADCS and certificate lifecycle automation platforms like Keyfactor.
Experience administering HSM platforms (e.g., Thales Luna) including key generation, backup, recovery, partition management, and operational controls.
Ideal Candidate Profile
Experienced working in large global enterprises managing diverse cryptographic infrastructures and certificate services across cloud, on-prem, and third-party environments.
Skilled in integrating and automating certificate services with DevOps, cloud platforms, APIs, and enterprise systems to improve operational resilience.
Strong operational discipline with proven ability to manage compliance, risk assessments, disaster recovery, and secure cryptographic key management at scale.