PKI Engineer

Job Description

This individual will support the design, implementation, and ongoing management of enterprise PKI services as part of a large-scale digital certificate modernization effort. Responsibilities include assisting with the migration from Microsoft ADCS to CyberArk Certificate Manager and Venafi, managing Certificate Authority infrastructure, supporting certificate lifecycle processes, integrating with external providers such as DigiCert, and configuring HSMs to protect key material. The role will also troubleshoot certificate-related issues across enterprise environments, partner with security and infrastructure teams throughout deployment, ensure compliance with security standards, and develop operational documentation and best practices for the new platform.

Skills and Requirements

• 5+ years of experience supporting enterprise PKI environments.
• Experience implementing or deploying Certificate Authority (CA) infrastructure in a large enterprise environment.
• Strong hands-on experience with Microsoft ADCS.
• Experience with enterprise certificate lifecycle management platforms such as Venafi and/or CyberArk Certificate Manager.
• Deep understanding of PKI architecture, x.509 certificates, certificate chains, SSL/TLS, and trust relationships.
• Experience supporting certificate issuance, renewal, revocation, and governance processes.
• Experience configuring and managing Hardware Security Modules (HSMs).
• Experience integrating PKI solutions with external certificate authorities such as DigiCert.
• Strong troubleshooting and problem-solving skills.
• Experience working within enterprise security and infrastructure environments.
• Experience migrating from Microsoft ADCS to Venafi or CyberArk Certificate Manager.
• Experience with SaaS-based certificate lifecycle management solutions.
• PowerShell automation experience.
• Experience supporting cloud environments including Azure or AWS.
• CISSP, Security+, CyberArk, or other security-related certifications.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].