Description

You will design, deploy, and manage the organization's Public Key Infrastructure (PKI), ensuring secure certificate lifecycle operations and high availability.

This role is hybrid.

Responsibilities

• Architect and deploy Microsoft Active Directory Certificate Services (AD CS) components, including CAs, OCSPs, CRLs, and NDES.
• Manage the full certificate lifecycle using Certificate Lifecycle Management (CLM) platforms and Hardware Security Modules (HSMs).
• Develop and implement automation scripts in PowerShell and Python for PKI operations, issuance, and revocation.
• Provide Tier 3 support for complex PKI incidents, conducting root cause analysis and implementing fixes.
• Advise on cryptographic standards and key management to contribute to security architecture.

Required Skills

• 5+ years of experience in PKI engineering.
• Expertise in Microsoft Active Directory Certificate Services (AD CS).
• Proficiency in PowerShell and Python scripting.
• Experience with Certificate Lifecycle Management (CLM) platforms and Hardware Security Modules (HSMs).
• Familiarity with DevOps practices.
• Working knowledge of relational databases and SQL.
• Experience implementing and validating PKI Proof of Concepts.
• Ability to conduct risk assessments for PKI deployments.

Key Skills

Education

Bachelor's or Master's degrees