LC
Implementation Engineer — Cryptographic Strategy & Post-Quantum
LCI-Lawinger Consulting
Contract type
Ongoing
Work mode
Remote
Experience
Senior · 5+ years
Job description
A hands-on Implementation Engineer role focused on turning enterprise cryptographic strategy and Post-Quantum Readiness goals into practical, scalable services. The engineer enables self-service certificate capabilities through DigiCert, automates certificate lifecycle management, and establishes a Cryptographic Bill of Materials across the enterprise.
At a glance
- Work mode
- Remote
What you'll do
- Implement enterprise cryptographic strategy through practical platforms, services, automation, and engineering standards.
- Enable and expand DigiCert self-service capabilities for application and infrastructure teams, including secure certificate request, approval, issuance, renewal, revocation, and reporting workflows.
- Design, build, and support automated certificate lifecycle management across enterprise environments.
- Integrate certificate automation with CI/CD pipelines, cloud platforms, infrastructure-as-code, secrets-management tools, load balancers, APIs, and application platforms.
- Establish and maintain a Cryptographic Bill of Materials (CBOM) that documents cryptographic assets, certificates, algorithms, keys, protocols, libraries, dependencies, ownership, business criticality, and lifecycle status.
- Support cryptographic discovery and inventory efforts across applications, endpoints, networks, cloud services, PKI, and third-party technologies.
- Help identify and remediate certificate expiration risk, weak or legacy cryptographic configurations, hard-coded cryptographic dependencies, and gaps in crypto-agility.
- Develop reusable implementation patterns, runbooks, technical documentation, dashboards, and operational controls for certificate and cryptographic services.
- Partner with senior engineers and architects on PQR and PQC initiatives, including readiness assessments, migration planning, hybrid cryptography pilots, and technology evaluations.
- Track implementation progress, technical dependencies, risks, and remediation status; escalate blockers to the senior lead as needed.
- Provide hands-on technical support and guidance to application and infrastructure teams adopting enterprise cryptographic services.
What we're looking for
- 5–10 years of hands-on experience in security engineering, platform engineering, DevSecOps, cloud engineering, infrastructure engineering, or application engineering.
- Practical experience with PKI, X.509 certificates, TLS/SSL, certificate authorities, certificate lifecycle management, and key-management concepts.
- Experience administering, integrating, or automating enterprise certificate-management platforms; DigiCert experience is strongly preferred.
- Experience building automation with Python, PowerShell, Bash, Java, Go, or similar languages.
- Familiarity with REST APIs, CI/CD pipelines, Git-based workflows, Terraform, Ansible, containers, and/or Kubernetes.
- Experience working in AWS, Azure, and/or Google Cloud, including cloud certificate, key-management, secrets, identity, and network-security services.
- Understanding of applied cryptography, including encryption, hashing, digital signatures, key exchange, PKI, protocols, and cryptographic libraries.
- Ability to troubleshoot certificate, TLS, trust-store, key, and cryptographic configuration issues in production environments.
- Strong communication and documentation skills, with the ability to work effectively in a remote, cross-functional global team.
Nice to have
- Experience implementing certificate self-service portals, certificate automation, ACME/SCEP/EST workflows, or certificate lifecycle integrations.
- Experience creating or maintaining a CBOM, cryptographic inventory, software bill of materials, configuration-management database, or asset-discovery program.
- Familiarity with Post-Quantum Cryptography, Post-Quantum Readiness, crypto-agility, and emerging standards such as ML-KEM and ML-DSA.
- Experience with HSMs, cloud KMS services, secrets-management platforms, code signing, mTLS, API security, or enterprise PKI modernization.
- Experience in a large, regulated, or highly distributed enterprise environment.