PKI Engineer

JOB DESCRIPTION

This individual will support the design, implementation, and ongoing management of enterprise PKI services as part of a large-scale digital certificate modernization effort. Responsibilities include assisting with the migration from Microsoft ADCS to CyberArk Certificate Manager and Venafi, managing Certificate Authority infrastructure, supporting certificate lifecycle processes, integrating with external providers such as DigiCert, and configuring HSMs to protect key material. The role will also troubleshoot certificate-related issues across enterprise environments, partner with security and infrastructure teams throughout deployment, ensure compliance with security standards, and develop operational documentation and best practices for the new platform.

REQUIRED SKILLS AND EXPERIENCE

• 5 years of experience supporting enterprise PKI environments.
• Experience implementing or deploying Certificate Authority (CA) infrastructure in a large enterprise environment.
• Strong hands-on experience with Microsoft ADCS.
• Experience with enterprise certificate lifecycle management platforms such as Venafi and/or CyberArk Certificate Manager.
• Deep understanding of PKI architecture, x.509 certificates, certificate chains, SSL/TLS, and trust relationships.
• Experience supporting certificate issuance, renewal, revocation, and governance processes.
• Experience configuring and managing Hardware Security Modules (HSMs).
• Experience integrating PKI solutions with external certificate authorities such as DigiCert.
• Strong troubleshooting and problem-solving skills.
• Experience working within enterprise security and infrastructure environments.

NICE TO HAVE SKILLS AND EXPERIENCE

• Experience migrating from Microsoft ADCS to Venafi or CyberArk Certificate Manager.
• Experience with SaaS-based certificate lifecycle management solutions.
• PowerShell automation experience.
• Experience supporting cloud environments including Azure or AWS.
• CISSP, Security , CyberArk, or other security-related certifications.