Sr. AgileSec Analytics Platform Engineer Lead

Position

Sr. AgileSec Analytics Platform Engineer Lead

Location

Pittsburgh, PA (Hybrid)

Employment Mode

Contract position

About

The Senior AgileSec Analytics Platform Engineer leads the end-to-end onboarding and operationalization effort. This candidate brings deep platform experience, drives architectural decisions, and sets the standard for documentation and process repeatability across the engagement.

Responsibilities

• Lead platform architecture review and integration design for AgileSec Analytics within the client environment.
• Establish repeatable deployment and configuration management frameworks, including automated upgrade and patching pipelines.
• Own the full documentation lifecycle: from initial runbook creation through peer review, version control, and handoff to the operations team.
• Serve as the primary technical point of contact across security, infrastructure, and operations stakeholders.
• Mentor mid-level team members and ensure knowledge transfer throughout the engagement.
• Define monitoring and alerting standards for platform health and user activity within AgileSec Analytics.
• Lead Cipher Insights network component configuration, where applicable.
• Own end-to-end certificate lifecycle management (issue, renew, revoke, rotate) across enterprise environments.
• Build and maintain automated certificate workflows integrated into CI/CD pipelines.
• Operate and scale PKI environments (internal CAs, intermediate chains, trust stores).
• Integrate Keyfactor with CI/CD tools (GitHub Actions, Jenkins, Azure DevOps), cloud platforms (AWS, Azure), and infrastructure (F5, NGINX, IIS, Kubernetes).
• Troubleshoot and resolve TLS/SSL handshake failures, broken trust chains, and certificate expiration incidents.
• Partner directly with engineering teams in an agile model to deliver security as code.

Required Skills

• Integration & Connectivity: 2-4 years of experience with API integrations, webhook/callback patterns, and secure credential handling.
• Ability to troubleshoot connectivity issues using logs, network tools, and platform diagnostics.
• Infrastructure: Proficient Linux command-line user with scripting experience (Bash or Python); Kubernetes exposure is a strong plus.
• Working knowledge of configuration management concepts; experience with at least one deployment automation tool is beneficial.
• OpenSearch & Analytics Stack: Working knowledge of OpenSearch or a comparable search/analytics stack (Elasticsearch, Splunk, etc.): indexing basics, dashboard creation, and query writing.
• Experience setting up or supporting analytics/observability platforms in an enterprise context.
• Documentation & Communication: Demonstrated ability to write clear, structured procedural documentation for technical and non-technical audiences.
• Comfortable communicating across security, infrastructure, and operations teams; proactive in flagging blockers.

Preferred Qualifications

• Direct exposure to the AgileSec Analytics platform or the Keyfactor product suite.
• Familiarity with Cipher Insights network discovery concepts.
• Experience in environments with cryptographic or compliance requirements (awareness-level, not practitioner-level).

Additional Required Skills

• Integration & Connectivity: 5+ years of hands-on experience with API-based integrations, REST/webhook patterns, and secure credential management (secrets vaults, token rotation).
• Demonstrated ability to diagnose and resolve complex system-to-system connectivity issues in production environments.
• Infrastructure: Strong Linux OS administration and/or Kubernetes cluster management experience, including scripting (Bash, Python, or similar) and error handling at scale.
• Familiarity with deployment automation tooling (Ansible, Helm, Terraform, or equivalent) for analytics platform lifecycle management.
• OpenSearch & Analytics Stack: Advanced working knowledge of OpenSearch: index management, custom queries, dashboard development, and cluster performance tuning.
• Experience operating or standing up comparable analytics/observability platforms (e.g., Elasticsearch, Splunk, Datadog, Grafana stack).
• Documentation & Communication: Track record of producing enterprise-grade operational runbooks and technical documentation consumed by both engineers and business users.
• Excellent verbal and written communication; comfortable leading cross-functional workshops and stakeholder reviews.

What this role is

We are looking for a hands-on operator who owns certificate lifecycle, PKI, and machine identity at scale and has been accountable for it in production environments.

What you'll do

• Own end-to-end certificate lifecycle management (issue, renew, revoke, rotate) across enterprise environments.
• Build and maintain automated certificate workflows integrated into CI/CD pipelines.
• Operate and scale PKI environments (internal CAs, intermediate chains, trust stores).
• Integrate Keyfactor with CI/CD tools (GitHub Actions, Jenkins, Azure DevOps), cloud platforms (AWS, Azure), and infrastructure (F5, NGINX, IIS, Kubernetes).
• Troubleshoot and resolve TLS/SSL handshake failures, broken trust chains, and certificate expiration incidents.
• Partner directly with engineering teams in an agile model to deliver security as code.

What you must have (non-negotiable)

• Proven experience managing PKI in production environments (not lab/theory).
• Hands-on ownership of certificate lifecycle automation.
• Strong understanding of TLS handshake and encryption fundamentals, certificate chains (root/intermediate), CRL vs OCSP.
• Experience with Keyfactor or comparable PKI platforms.
• Scripting experience (PowerShell or Python) used in real-world automation.
• Experience supporting production incidents related to certificates or encryption.

What will set you apart

• Experience integrating certificate management into CI/CD pipelines.
• Exposure to cloud-native certificate services (AWS ACM, Azure Key Vault).
• Experience in containerized environments (Kubernetes, ingress controllers).
• Ability to translate security requirements into automated, scalable solutions.

How we evaluate candidates

You will be asked to walk through real scenarios, including:

• A certificate-related outage you handled end-to-end.
• How you automated certificate provisioning and renewal.
• How trust chains function and fail in production environments.

We are not looking for theoretical answers; we're looking for operators who have done the work.

What success looks like

• Zero certificate-related outages.
• Fully automated certificate lifecycle across environments.
• Clear visibility and control over machine identities.
• Engineering teams enabled not blocked by security.