What are the responsibilities and job description for the PKI Engineer position at Motion Recruitment?
Our client is seeking a fully onsite PKI Engineer for a 12 month contract in Irving, TX. No C2C!
Required
Required
- Bachelor's degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience).
- Security , CISSP, GSEC, or equivalent security certifications.
- Microsoft security or identity certifications preferred.
- Experience with Azure, AWS, or GCP certificate management services.
- Knowledge of Zero Trust principles and modern authentication technologies.
- 3-5 years of PKI engineering, information security, or infrastructure security experience.
- Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
- Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles.
- Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
- Knowledge of HSMs and cryptographic key management.
- Strong troubleshooting, analytical, and documentation skills.
- Experience with PowerShell or other automation/scripting technologies.
- PKI Infrastructure Administration: Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), HSMs, OCSP responders, and certificate enrollment services.
- Certificate Lifecycle Management: Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances.
- PKI Security & Compliance: Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards.
- Certificate Automation & Integration: Design and support automated certificate management solutions using Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies.
- Cryptographic Key Management: Manage cryptographic key generation, storage, rotation, escrow, and destruction processes.
- Troubleshooting & Support: Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems.
- PKI Standards & Documentation: Develop and maintain PKI architecture diagrams, procedures, technical documentation, and governance standards.
- Security Operations & Continuous Improvement: Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts.
Salary : $50 - $55