PKI / WAF CyberSecurity Engineer

Senior Cybersecurity Engineer - DNS Security, PKI & WAF

Hybrid, Charlotte, NC

Our client is seeking a highly skilled Senior Cybersecurity Engineer to lead the design, implementation, and operation of critical internet-facing security services across the enterprise. This role will serve as a technical owner for DNS Security, Public Key Infrastructure (PKI) , Certificate Lifecycle Management, Web Application Firewall (WAF) Engineering, Edge Security Controls, Security Automation, and Security Architecture initiatives. The ideal candidate will have deep expertise securing enterprise-scale digital infrastructure and a proven track record of delivering resilient, automated, and scalable security solutions that protect business-critical applications and services. This position offers the opportunity to own high-visibility security platforms with enterprise-wide impact while partnering with architecture, engineering, infrastructure, and security operations teams to drive strategic security initiatives.

Key Responsibilities

• Own and manage enterprise DNS Security services, including DNSSEC implementation, validation, monitoring, and governance.
• Design and maintain enterprise PKI solutions, ensuring secure certificate issuance, renewal, revocation, and lifecycle management.
• Lead certificate automation initiatives to improve operational efficiency and reduce business risk.
• Design, implement, and optimize Web Application Firewall (WAF) platforms and policies across cloud and on-premises environments.
• Engineer and maintain edge security controls utilizing technologies such as Cloudflare, Imperva, F5, and Akamai.
• Develop and enhance DDoS protection strategies for internet-facing applications and services.
• Implement security controls aligned with OWASP best practices and modern application security standards.
• Build automation and infrastructure-as-code solutions using Terraform and Python.
• Integrate security platforms and telemetry with enterprise SIEM solutions for monitoring, alerting, and incident response.
• Collaborate with enterprise architecture teams to define and implement secure internet-facing infrastructure patterns.
• Conduct architecture reviews, risk assessments, and security design evaluations.
• Provide technical leadership, mentorship, and guidance across security engineering initiatives.

Required Qualifications

• 7+ years of cybersecurity engineering experience.
• Strong expertise in DNS Security and DNSSEC.
• Hands-on experience with PKI and enterprise Certificate Lifecycle Management.
• Proven experience engineering and administering Web Application Firewalls (WAFs).
• Experience with one or more leading edge security platforms including:
• Cloudflare
• Imperva
• F5
• Akamai
• Strong understanding of OWASP Top 10 protections and web application security.
• Experience implementing and supporting DDoS mitigation solutions.
• Working knowledge of Terraform and infrastructure automation.
• Scripting and automation experience with Python.
• Experience integrating security controls with SIEM platforms.
• Strong understanding of internet-facing infrastructure security and enterprise architecture principles.

Preferred Qualifications

• Experience serving as a technical lead, architect, or subject matter expert for enterprise security platforms.
• Exposure to cloud security architectures and hybrid environments.
• Experience developing security standards, governance models, and strategic roadmaps.
• Strong communication and stakeholder management skills.

Employer/Veterans/Disabled

• medical
• dental
• vision
• term life insurance
• short-term disability insurance
• additional voluntary benefits
• commuter benefits
• 401K plan
• Paid Sick Leave, where required by law
• any other paid leave required by Federal, State or local law
• Holiday pay upon meeting eligibility criteria

Disclaimer: These benefit offerings do not apply to client-recruited jobs and jobs which are direct hire to a client.

To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit

The Company will consider qualified applicants with arrest and conviction records.