PKI / Keyfactor Engineer (Secrets & Certificate Management)

Job Title

PKI / Keyfactor Engineer (Secrets & Certificate Management)

Location

Remote (USA) / Hybrid (if applicable)

Duration

10 + month contract

“Applicants must be authorized to work in the U.S. without current or future employer sponsorship.”

Job Summary

We are seeking a PKI / Keyfactor Engineer to design, implement, and manage enterprise-grade certificate lifecycle management and secrets management platforms. The ideal candidate will have deep expertise in PKI, Keyfactor, Azure Key Vault, and automation, enabling secure and scalable digital identity across cloud and on-prem environments.

Key Responsibilities

• Design, implement, and manage PKI infrastructure and certificate lifecycle processes
• Administer and optimize Keyfactor (or similar CLM platforms)
• Manage enterprise secrets using:
• Azure Key Vault
• HashiCorp Vault
• CyberArk (preferred)
• Automate certificate issuance, renewal, and revocation using PowerShell / APIs
• Integrate PKI and secrets management with cloud platforms (Azure, AWS, Google Cloud Platform)
• Build and maintain CI/CD integrations for certificate automation
• Deploy and manage HSM (Hardware Security Modules)
• Collaborate with DevOps, security, and infrastructure teams
• Ensure compliance with security policies and audit requirements
• Troubleshoot PKI and certificate-related issues across environments

Required Skills

• 7+ years of experience in PKI and Certificate Management
• Strong hands-on experience with Keyfactor (or Venafi / DigiCert / AppViewX)
• Expertise in:
• Azure Key Vault (must-have)
• HashiCorp Vault / CyberArk
• Experience with PowerShell scripting and automation
• Strong knowledge of:
• PKI architecture
• SSL/TLS certificates
• Cryptographic principles
• Hands-on experience with cloud platforms (Azure preferred, AWS/Google Cloud Platform acceptable)
• Experience with API integrations and DevOps tools (CI/CD)
• Exposure to Infrastructure as Code (Terraform / ARM / etc.)
• Experience working with HSMs

Preferred Skills

• Experience with Keyfactor Command / EJBCA
• Knowledge of Zero Trust / machine identity security
• Experience with certificate discovery and compliance tools
• Prior experience in regulated environments (finance, healthcare, etc.)

Education

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)