PKI / Microsoft AD CS Engineer (Windows Server Migration)

Job Title: PKI / Microsoft AD CS Engineer (Windows Server Migration)
Location: Remote

Job Description:

We are seeking an experienced PKI / Microsoft Active Directory Certificate Services (AD CS) Engineer to support a critical infrastructure migration initiative. This role is highly hands-on and execution-focused, requiring deep expertise in Microsoft PKI environments and Windows Server upgrades.

The primary objective is to migrate core fleet services and PKI/AD CS infrastructure from Windows Server 2016/2019 to Windows Server 2022, ensuring minimal disruption and maximum security compliance.

Key Responsibilities:

• Lead the end-to-end migration of PKI and AD CS environments from Windows Server 2016/2019 to Windows Server 2022

• Analyze application dependencies and design a phased migration strategy for all impacted systems

• Execute hands-on configuration, deployment, and troubleshooting of AD CS components

• Work closely with Active Directory Domain Services (AD DS) including domain controllers and related services

• Ensure compatibility, stability, and risk mitigation during migration from legacy environments

• Manage and configure:

  • Certificate Authorities (Enterprise & Subordinate CAs)

  • Certificate templates and enrollment policies

  • CRLs (Certificate Revocation Lists) and OCSP responders

• Document migration procedures, configurations, risks, and post-migration environments

• Act as a Subject Matter Expert (SME) for PKI and Microsoft security infrastructure

Required Qualifications:

• Proven experience in end-to-end migration of PKI/AD CS environments across Windows Server versions

  • (Preferred: Windows Server 2016/2019 → 2022)

• Deep expertise in Microsoft PKI architecture, including:

  • Certificate Authorities (CA hierarchy)

  • Certificate templates and policies

  • CRLs and OCSP configuration

• Strong hands-on experience with Active Directory Domain Services (AD DS)

• Experience working with domain controllers and enterprise-level AD environments

• Ability to independently execute production-critical upgrades and migrations

• Strong documentation and communication skills

Preferred Skills:

• Experience in large-scale enterprise infrastructure migrations

• Knowledge of Windows security best practices and compliance standards

• Familiarity with hybrid or cloud-integrated environments