PKI Engineer

Job Description:

Pacific Life is investing in bright, agile and diverse talent to contribute to our mission of innovating our business and creating a superior customer experience. We’re actively seeking a talented PKI Engineer to join our Security Operations team in Newport Beach, CA, Omaha, NE or Lynchburg, VA. This role can be on-site or hybrid.

As a PKI Engineer, you’ll play a key role in Pacific Life’s growth and long-term success by establishing processes and procedures for securing Pacific Life’s information assets through proper design, implementation, and maintenance of a secure public key infrastructure. You will fill a new role that sits on a team of 10 people in the Security Operations division. Your colleagues will include Information Protection, Security Operations, and eDiscovery professionals.

How you will make an impact:

• Maintain a secure public key infrastructure to support certificate-based authentication and encryption.
• Manage and maintain digital certificates, including certificate authorities, root certificates, and intermediate certificates.
• Manage and monitor the issuance, revocation, and renewal of certificates.
• Responsible for everyday creation and maintenance of CRLs and OCSP services.
• Develop and maintain automation of certificate and key inventory, generation, installation and renewal.
• Implement and maintain secure certificate-based authentication and encryption protocols, such as SSL/TLS.
• Collaborate with cross-functional teams to ensure that the PKI infrastructure is properly integrated with identified systems and processes.
• Document all key generation and management activities according to established processes.
• Ensure compliance with industry standards and best practices such as NIST guidelines.
• Develop metrics and KPIs/KRIs to accurately reflect status of PKI operations.
• Provide guidance and training to key stakeholders on PKI lifecycle, processes and procedures.
• Provide support to internal teams in the use and integration of certificate and key services

The experience you will bring:

• A bachelor’s degree in information systems or equivalent work experience is required.
• 5+ years of experience with public key infrastructure design and implementation.
• Strong understanding of certificate-based authentication and encryption protocols such as: SSL/TLS.
• A strong understanding and hands on experience with PKI operations to include digital certificate, key and secrets management (issuance, renewal, and revocation).
• Strong technical skills in network, server, and application security.
• Experience with one or more of the following: IT Systems, Server, Network, Active Directory/LDAP, Unix/Linux or Virtualization administration.
• Experience with certificate management tools such as: Venafi, AppViewX, Keyfactor, Azure Key Vault, AWS Key Management Service, Active Directory Certificate Services (AD CS) and HSMs.
• Experience troubleshooting digital certificate issues.
• A CISSP or CISM certification is highly desired.
• Holding any of the following certifications is a plus; GCIH, CCNA, C|EH, GMON, GSEC.
• Strong communication skills in working with internal teams, stakeholders, and 3rd party vendors.
• Ability to write clear and concise documentation translating the technical into layman’s and/or business terms.

What will make you stand out:

• Advanced degree in Information Security
• Hands on experience with various certificate and key management platforms such as Venafi, AppViewX, AWS Certificate Manager, Active Directory Certificate Services (AD CS) and HSMs
• Experience implementing and/or managing certificate management platforms in a medium to large Enterprise

The base pay range for this position is between 93,600.00 – 117,000.00 – 158,000.00 USD Annual.

Base Pay Range:

The base pay range noted provides a basis to determine the appropriate offer dependent upon several factors including but not limited to geographic location, experience, skills, education and pay equity. Also, most employees are eligible for additional incentive pay.

$93,600.00 – $117,000.00 – $158,000.00

Your Benefits Start Day 1  
 

Your wellbeing is important to Pacific Life, and we’re committed to providing you with flexible benefits that you can tailor to meet your needs. Whether you are focusing on your physical, financial, emotional, or social wellbeing, we’ve got you covered.

• Prioritization of your health and well-being including Medical, Dental, Vision, and Wellbeing Reimbursement Account that can be used on yourself or your eligible dependents

• Generous paid time off options including: Paid Time Off, Holiday Schedules, and Financial Planning Time Off

• Paid Parental Leave as well as an Adoption Assistance Program

• Competitive 401k savings plan with company match and an additional contribution regardless of participation

EEO Statement:

Pacific Life Insurance Company is an Equal Opportunity /Affirmative Action Employer, M/F/D/V. If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access our career center as a result of your disability. To request an accommodation, contact a Human Resources Representative at Pacific Life Insurance Company.