PKI Engineer

Job Title: PKI Engineer

Job Location: Remote

Job Duration: 6+ months C2H

Interview: Virtual



Note: Only W2 and no sponsorship



Role Overview:

We are seeking an experienced PKI Security Engineer with proven expertise in Venafi and enterprise-level certificate management. The ideal candidate will have a strong background in Microsoft PKI, Active Directory, and Entre Identity, and experience working across Windows and Linux server environments. This role requires a solid understanding of TLS/SSL certificates, certificate authorities, and lifecycle management, as well as the ability to lead technical assessments and drive security projects to completion.

Key Responsibilities:

• Manage and maintain enterprise PKI infrastructure with a focus on Venafi in production environments.
• Oversee the TLS/SSL certificate lifecycle, including issuance, renewal, and revocation with CAs such as Digicert.
• Integrate and optimize PKI services across Windows and Linux platforms.
• Collaborate with IT and security teams to align certificate management with compliance and regulatory standards.
• Conduct technical assessments, identify gaps, and implement secure, scalable solutions.
• Document PKI processes, standards, and best practices for internal and audit use.
• Act as a subject matter expert on PKI, Venafi, and enterprise identity security.

Required Skills & Experience:

• Proven hands-on experience with Venafi in production environments.
• Strong knowledge of Microsoft PKI, Active Directory, and Entre Identity.
• Proficiency with both Windows and Linux server environments.
• In-depth understanding of TLS/SSL certificates, CAs, and certificate lifecycle management.
• Familiarity with security principles, risk management, and compliance frameworks.
• Strong ability to work independently, lead initiatives, and deliver results in fast-paced environments.
• Excellent problem-solving, communication, and documentation skills.