Job Description:

How youll help us Keep Climbing (overview & key responsibilities)

At Delta Air Lines, connection is at the heart of everything we do and guides our every action. We strive to welcome and care for all of our customers during their travels with us and aim to deliver an elevated experience.

Delta is focused on sustaining a strong IT operation, growing our capabilities, and maximizing optimization across each of our tech hubs to elevate the travel experience for our customers and empower our 90,000 Delta people.

We’re committed to fostering innovation, and we’re excited to invite you to be part of our journey as we shape the future of technology at the world’s best airline!

The PKI Engineer is responsible for designing, operating, and enhancing the enterprise Public Key Infrastructure (PKI) and certificate management services. This role ensures secure authentication, encryption, and certificate lifecycle management across enterprise systems, supporting regulatory compliance and operational stability.

This position plays a critical role in scaling PKI services, driving automation, and reducing operational risk associated with certificate expiration, trust store management, and cryptographic operations.

YOUR RESPONSIBILITIES IN THIS ROLE:1. PKI Infrastructure & Operations

Maintain and operate PKI platforms, including Certificate Authorities (CAs), HSMs, and certificate management systems
Ensure availability, resiliency, and patching of PKI infrastructure
Support certificate issuance, renewal, revocation, and lifecycle management

2. Certificate Lifecycle Management

Manage large-scale certificate environments across applications and infrastructure
Ensure timely renewal and replacement of certificates
Support trust store management and certificate chain integrity

3. Automation & Integration

Build and implement automation for certificate lifecycle management
Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications)
Deploy and operationalize tools such as connectors and automation pipelines

4. Governance, Standards & Policy Enforcement

Enforce security policies related to certificate usage and cryptography
Define and maintain standards for certificate issuance, validity, and usage
Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives)

5. Cross-Team Collaboration

Partner with application and infrastructure teams to enable certificate automation
Provide guidance and supporting tooling while ensuring clear ownership boundaries
Assist teams with onboarding to PKI services and automation

6. Risk Reduction & Incident Support

Identify and remediate risks related to certificate expiration, misconfiguration, or trust failures
Support incident response involving certificate or encryption issues
Improve visibility and reporting for certificate health and compliance

7. Emerging Crypto & Future Readiness

Support adoption of new cryptographic standards (e.g., post-quantum cryptography)
Assist in modernization of PKI architecture and tooling
Evaluate new solutions for scalability and resilience

Benefits and Perks to Help You Keep Climbing

Our culture is rooted in a shared dedication to living our values – Care, Integrity, Resilience and Servant Leadership – every day, in everything we do. At Delta, our people are our success. At the heart of what we offer is our focus on Sharing Success with Delta employees. Exploring a career at Delta gives you a chance to see the world while earning great compensation and benefits to help you keep climbing along the way:

Competitive salary, industry-leading proﬁt sharing program, and performance incentives
401(k) with generous company contributions up to 9
New hires are eligible for up to 2-weeks of vacation. This is earned for use in the following vacation year (April 1 – March 31)
In addition to vacation, new hires are eligible for up to 56 hours of paid personal time within a 12-month period

10 paid holidays per calendar year

Birthing parents are eligible for 12-weeks of paid maternity/parental leave
Non-birthing parents are eligible for 2-weeks of paid parental leave
Comprehensive health beneﬁts including medical, dental, vision, short/long term disability and life insurance beneﬁts
Family care assistance through fertility support, surrogacy and adoption assistance, lactation support, subsidized back-up care, and programs that help with loved ones in all stages
Holistic Wellbeing programs to support physical, emotional, social, and financial health, including access to an employee assistance program offering support for you and anyone in your household, free financial coaching, and extensive resources supporting mental health
Domestic and International space-available flight privileges for employees and eligible family members
Career development programs to achieve your long-term career goals
World-wide partnerships to engage in community service and innovative goals created to focus on sustainability and reducing our carbon footprint
Business Resource Groups created to connect employees with common interests to promote inclusion, provide perspective and help implement strategies
Recognition rewards and awards through the platform Unstoppable Together
Access to over 500 discounts, specialty savings and voluntary benefits through Deltaperks such as car and hotel rentals and auto, home, and pet insurance, legal services, and childcare

What you need to succeed (minimum qualifications)

Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
3–7+ years in PKI, cybersecurity engineering, or infrastructure security
Hands-on experience with certificate lifecycle management
Experience with PKI tools/platforms (e.g., Venafi, DigiCert, Microsoft CA, AWS ACM)
Understanding of TLS/SSL, cryptographic principles, and key management
Consistently prioritizes safety and security of self, others, and personal data.
Embraces diverse people, thinking, and styles.
Possesses a high school diploma, GED, or high school equivalency.
Is at least 18 years of age and has authorization to work in the United States.

What will give you a competitive edge (preferred qualifications)

Experience with:

HSMs and key custody operations
PKI automation (APIs, pipelines, scripting)
Cloud certificate services (AWS, Azure)

Knowledge of compliance frameworks (NIST, PCI-DSS, CMMC)
Experience scaling PKI in large enterprise environments
Familiarity with trust store management across distributed systems

Job Ident #: 32759

Apply Now

(Job and company information not to be copied, shared, scraped, or otherwise disseminated/distributed without explicit consent of JSfirm, LLC)