PKI Engineer
Core
Design, implement, and manage enterprise PKI and Certificate Lifecycle Management services, ensuring compliance with security and audit standards.
Role type
Senior IC PKI/CLM Engineer
Builds
Enterprise PKI infrastructure and automated certificate lifecycle processes
Domain
Cybersecurity, Cryptography, Cloud Infrastructure
Required skills
Microsoft ADCS, SCEP, AWS PCA, Venafi, HSM & Encryption, PKI & Certificate Management, PowerShell scripting, Cryptography standards (TLS, X.509, RSA/ECC)
Preferred skills
AD, DNS, IAM operations, CyberArk Privilege Cloud, Cloud-based certificate management
Technologies
Microsoft Active Directory Certificate Services, AWS ACM/PCA, Venafi Trust Protection Platform, HSM, TPM
Responsibilities
Manage certificate lifecycle activities (issuance, renewal, revocation, rekey, rollover, retirement), Configure and maintain Offline Root CA and Issuing CAs, Manage CRL/OCSP publishing, Maintain PKI documentation aligned with standards, Support audits and compliance requirements, Monitor PKI/HSM operations end-to-end, Implement processes for managing internal and external certificate lifecycles, Monitor certificates for expiration and revoke compromised ones, Maintain inventories of machine identities, Identify orphaned or misconfigured machine identities, Monitor adherence to governance controls
Seniority
Senior, hands-on IC
