Description

You will design and deploy the organization's Public Key Infrastructure (PKI).

Responsibilities

• Architect and deploy Microsoft Active Directory Certificate Services (AD CS) components, including CAs, OCSPs, CRLs, and NDES.
• Manage the full certificate lifecycle using CLM platforms and Hardware Security Modules (HSMs).
• Develop and implement automation scripts in PowerShell and Python for PKI operations, issuance, and revocation.
• Provide Tier 3 support for complex PKI incidents, conducting root cause analysis and implementing fixes.
• Contribute to security architecture by advising on cryptographic standards and key management.

Required Skills

• 5+ years of experience in PKI engineering.
• Expertise in Microsoft Active Directory Certificate Services (AD CS).
• Proficiency in scripting languages, specifically PowerShell and Python.
• Experience with Certificate Lifecycle Management (CLM) platforms and HSMs.
• Familiarity with Devops practices.
• Working knowledge of relational databases and SQL.
• Experience implementing and validating PKI Proof of Concepts.
• Ability to conduct risk assessments for PKI deployments.

Key Skills

Education

Bachelor's or Master's degrees