Identity & Security Engineer
Core
Administer enterprise PKI platforms and manage the full certificate lifecycle to ensure secure authentication, encryption, and trust for critical scientific and operational platforms.
Role type
Identity & Security Engineer (PKI Specialist)
Builds
Reliable internal certificate services and trust components for enterprise research, development, and operations.
Domain
Enterprise IT Security / PKI / Certificate Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
PKI operations, Certificate lifecycle management, CA administration, Cryptographic key management, TLS/SSL and encryption concepts, CRL and OCSP troubleshooting, Windows Server infrastructure, Incident and change management frameworks, Technical documentation
Preferred skills
Microsoft Active Directory Certificate Services (AD CS), Hardware Security Modules (HSM), PowerShell scripting, Hybrid identity environments, Cloud-based certificate services, Audit and compliance in regulated environments
Technologies
Microsoft Active Directory Certificate Services, HSM, PowerShell, Windows Server, CRL, OCSP
Responsibilities
Administer enterprise PKI platforms, Manage certificate issuance, renewal, revocation, and expiry, Operate Certificate Authorities and approval workflows, Execute cryptographic key generation, storage, and rotation, Investigate and resolve certificate-related incidents, Monitor platform health and performance, Implement changes, upgrades, and patching, Maintain runbooks and configuration records, Collaborate with infrastructure and cybersecurity teams
Seniority
Mid-level, hands-on IC