Senior PKI engineer

Other Jobs To Apply

No other job posts for this day.

<p>We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold <span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">ourselves accountable</span> and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.</p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p><b>Position Summary</b></p><p>As a PKI Engineer on the CVS Health PKI Engineering team, you will design, build, and operate the certificate lifecycle management infrastructure that secures one of the largest healthcare enterprises in the United States. You will work across two business units (CVS and Aetna), managing a combined estate of large certificates spanning internal, retail, and partner-facing applications.</p><p></p><p><b>Key Responsibilities</b></p><p><b>Certificate Operations & Automation</b></p><ul><li>Engineer and maintain PowerShell and Python automation for certificate lifecycle operations: issuance, renewal, retirement, and reporting.</li><li>Own and enhance the daily PKI operational reporting for certificate health monitoring across the enterprise.</li><li>Automate certificate automation and governance workflows, including bulk operations across Venafi TPP REST APIs.</li><li>Drive private chain adoption across application teams, targeting full migration off public CA chains for internal workloads.</li><li>Manage Digicert Certificate authority and Digicert one Certificate lifecycle management</li></ul><p><b>Legacy Decommissioning & CA Management</b></p><ul><li>Execute the Legacy MSCA shutdown plan</li><li>Track and remediate certificates tied to the Legacy CA expiration (Feb 2027 hard deadline).</li></ul><p><b>Security, Compliance & Architecture</b></p><ul><li>Maintain Zero Trust alignment across all PKI services: mTLS enforcement, workload identity, client authentication policies.</li><li>Support HIPAA, PCI-DSS, and SOX audit readiness through certificate inventory governance, expiration tracking, and compliance reporting.</li><li>Contribute to PQC readiness planning: crypto-agility assessments, hybrid certificate testing, and algorithm migration roadmaps.</li><li>Collaborate with network, application, and cloud teams to resolve certificate-related incidents and architecture reviews.</li></ul><p></p><div><p><b>Required Qualifications</b></p></div><ul><li>5+ years of hands-on PKI/CLM engineering experience in an enterprise environment (10,000+ certificates under management).</li><li>Deep working knowledge of X.509 certificate standards, CA hierarchies (root, intermediate, issuing), and certificate chain validation.</li><li>Production experience with at least one enterprise CLM platform: Venafi TPP, AppViewX, Keyfactor, or CyberArk (formerly Venafi).</li><li>Strong scripting/automation skills in PowerShell and/or Python, including REST API integration with CLM and CA platforms.</li><li>Hands-on experience with certificate provisioning to load balancers (F5 BIG-IP), CDNs (Akamai), web servers (IIS, Apache/Nginx), and cloud platforms (AWS ACM, Azure Key Vault).</li><li>Solid understanding of TLS/SSL protocols, cipher suites, key exchange mechanisms, and certificate revocation (CRL/OCSP).</li><li>Familiarity with ServiceNow, Jira, or equivalent ITSM/project tracking tools in a regulated enterprise environment.</li></ul><p></p><div><p><b>Preferred Qualifications</b></p></div><ul><li>Experience with DigiCert ONE, DigiCert CertCentral, or equivalent public CA management platforms.</li><li>Familiarity with Microsoft Active Directory Certificate Services (ADCS/MSCA) and Group Policy-based auto-enrollment.</li><li>Exposure to post-quantum cryptography standards (ML-KEM, ML-DSA) and crypto-agility planning.</li><li>Experience operating in dual-domain or multi-business-unit enterprise environments with segmented policy and access controls.</li><li>CISSP or vendor-specific PKI certifications (e.g., Venafi Certified Professional).</li><li>Experience with healthcare or financial services compliance frameworks (HIPAA, PCI-DSS, SOX).</li><li>Familiarity with F5, HashiCorp Vault, Akeyless, or similar secrets management platforms for certificate and key storage.</li><li><b>CLM Platforms </b>Venafi TPP , AppViewX ,KeyFactor</li><li><b>Certificate Authorities</b> DigiCert ONE, Internal Private CAs</li><li><b>Automation</b> PowerShell, Python, REST APIs, Venafi WebSDK</li><li><b>Infrastructures </b>F5 BIG-IP, Akamai, IIS, Apache, Nginx</li><li><b>Cloud</b> AWS ,Azure (Key Vault)</li><li><b>ITSM / Project</b> ServiceNow</li></ul><p></p><p><b>Education: </b></p><ul><li>Bachelor’s degree or equivalent experience (Highschool diploma plus 4 years relevant work experience)</li></ul><p></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><b><span>Anticipated Weekly Hours</span></b></p>40<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><b>Time Type</b></p>Full time<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><b>Pay Range</b></p><p style="text-align:left">The typical pay range for this role is:</p><p style="text-align:inherit"></p>$92,700.00 - $185,400.00<p style="text-align:inherit !important"></p><p style="text-align:left !important">This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls.  The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors.  This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. <br> </p><p style="text-align:left !important">Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.</p><p style="text-align:inherit !important"></p><p><b>Great benefits for great people</b></p><p></p><p>We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.<br><br></p>This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility.<p><span style="color:#4a4a4a"><br>Additional details about available benefits are provided during the application process and on </span><a href="https://learn.bswift.com/cvshealth-mainland" target="_blank" rel="noopener noreferrer"><span style="color:#0000ff"><u>Benefits Moments</u></span></a><span style="color:#4a4a4a">.<br><br></span></p>We anticipate the application window for this opening will close on: 08/02/2026<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left">Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</p>

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...