Sr. PKI Engineer
Core
Operate and maintain enterprise public key infrastructure (PKI) and certificate management services, ensuring security, availability, and automation of cryptographic assets.
Role type
Senior IC PKI Engineer
Builds
Secure certificate lifecycle platforms, automated issuance/renewal workflows, and trusted identity services for the enterprise.
Domain
Cybersecurity / Cryptography / Identity Management
Required skills
Microsoft AD CS administration, Venafi Trust Protection Platform, Keyfactor Command, Fortanix Data Security Manager, HSM operations, X.509 certificate lifecycle, PowerShell scripting, Azure/AWS cryptographic management, offline root CA ceremonies
Preferred skills
Code signing support, publicly trusted TLS certificate management, PKI backup and recovery procedures
Technologies
Microsoft Active Directory Certificate Services, Venafi, Keyfactor, Fortanix, Sectigo, DigiCert, Azure, AWS, PowerShell
Responsibilities
Administer Microsoft AD CS including CAs, templates, NDES, and CRL publication; Operate certificate lifecycle platforms (Venafi/Keyfactor) for inventory and renewal; Troubleshoot certificate issuance, trust chains, and key access issues; Maintain PKI automation scripts and CLM/CLaaS infrastructure; Perform health checks, patching, and recovery testing; Coordinate certificate renewals with application owners; Maintain documentation and support audits.
Seniority
Senior, hands-on IC
