IT Security Engineer

Job description

## About the Role DTCC is seeking an IT Security Engineer to join the PKI Engineering team. You will support the enterprise Public Key Infrastructure (PKI) services and Certificate Lifecycle Management (CLM) platforms, ensuring reliable issuance, renewal, revocation, and management of digital certificates across critical applications, infrastructure, users, and devices. ## Primary Responsibilities - Administer and maintain enterprise Certificate Authorities (CAs) and PKI infrastructure. - Manage certificate lifecycle activities, including issuance, renewal, replacement, revocation, and validation. - Support CLM platforms, automate certificate processes using PowerShell, APIs, Ansible, Terraform, and other frameworks. - Assist application and infrastructure teams with onboarding, troubleshooting, and lifecycle management of certificates. - Monitor PKI and CLM environments for availability, performance, and compliance; participate in disaster‑recovery testing and platform upgrades. - Produce and maintain operational documentation, runbooks, and SOPs; partner with cybersecurity, cloud, and infrastructure teams. - Contribute to audits, compliance reviews, and evidence collection for PKI controls. ## Required Qualifications - Minimum of 4 years of relevant experience. - Strong experience with PKI platforms, CLM systems, Certificate Authorities, and Hardware Security Modules (HSMs). - Proficiency with Ansible, Terraform, and PowerShell for automation. - Deep understanding of TLS/SSL, X.509 certificates, CRL/OCSP, and mTLS. - Proven troubleshooting skills in enterprise‑scale PKI environments and knowledge of PKI governance and compliance. - Bachelor’s degree preferred or equivalent practical experience. ## Benefits - Competitive compensation package including base pay and annual incentive. - Comprehensive health, life insurance, and well‑being benefits (based on location). - Pension/retirement benefits, paid time off, and family‑care leaves. - Flexible hybrid work model: 3 days onsite, 2 days remote (specific onsite days may vary by team). - Opportunities for professional development and a supportive, inclusive workplace culture.

Required skills

Job locations

Compensation

Salary for this role is not disclosed by the employer. We don’t have enough benchmark data from similar roles to produce a reliable estimate. The actual compensation will be discussed during the interview process.