Cloud Engineer

Responsibilities

• Design, deploy, and manage enterprise PKI platforms including Microsoft ADCS, DigiCert, and NDES
• Own the full certificate lifecycle management process, including issuance, renewal, and automation
• Manage HSM-backed key protection and integrate with key management systems
• Integrate PKI with Active Directory and Microsoft Entra ID for hybrid identity scenarios
• Implement phishing-resistant authentication using FIDO2, PIV, and certificate-based methods
• Drive automation using scripting, APIs, and orchestration to reduce manual processes
• Support Zero Trust maturity and align PKI services with Azure and multi-cloud architectures
• Provide advanced engineering support, incident response, and root cause analysis

Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field
• 12–15 years of experience in Identity & Access Management (IAM), PKI, or security infrastructure engineering
• Proven experience operating large-scale enterprise PKI environments
• Hands-on expertise with PKI platforms, HSM, key management, and automation
• Proficiency with Active Directory and Microsoft Entra ID
• Strong understanding of cryptography, authentication, and trust models

Preferred Qualifications

• Industry certifications such as CISSP or Azure Security
• Experience working in regulated industries like oil & gas or energy
• Knowledge of Zero Trust architecture and Conditional Access
• Familiarity with ITIL and operational processes in regulated environments

About the Company

Chevron Corporation is one of the world's leading integrated energy companies. Through its subsidiaries that conduct business worldwide, the company is involved in virtually every facet of the energy industry, from exploration and production to refining and marketing.