Administrator - PKI & CLM (m/w/d)
Core
Administration and operation of Microsoft Active Directory Certificate Services (AD CS) and Keyfactor Command for Certificate Lifecycle Management (CLM), including HSM management and automation.
Role type
Senior PKI and Certificate Lifecycle Management Administrator
Builds
Production PKI infrastructure, automated certificate issuance for platforms/workloads, and secure remote access solutions.
Domain
Cybersecurity / PKI / Certificate Management
Required skills
Microsoft AD CS, Keyfactor Command, Entrust nShield HSM, X.509, TLS/mTLS, PowerShell, REST APIs, Git, CI/CD, IaC (Ansible/Terraform), OpenSSL, Wireshark
Preferred skills
EJBCA, SignServer, Kubernetes, cert-manager, NAC (EAP-TLS), VPN certificate authentication
Technologies
Windows Server 2025/2022, Keyfactor Command, Entrust nShield, ACME, SCEP, NDES, IIS, NGINX, Apache, Kubernetes, Git, Ansible, Terraform, OpenSSL, Wireshark
Responsibilities
Manage CA hierarchies, templates, AIA/CDP, CRL/OCSP; Operate and extend Keyfactor Command workflows; Perform HSM key ceremonies and health checks; Automate certificate issuance via ACME/REST/SCEP; Troubleshoot chain/trust issues and enrollment problems; Document processes and monitor certificate expiry.
Seniority
Senior, hands-on IC
