
Purple Drive Technologies LLC
Denver, Colorado • Today
Easy Apply
Full-time, Part-time, Contract, Third Party
1 results (1 new)

Purple Drive Technologies LLC
Denver, Colorado • Today
Easy Apply
Full-time, Part-time, Contract, Third Party

Job Title: Senior PKI & Certificate Management Engineer
Job Category: Cybersecurity
We are seeking an experienced Senior PKI & Certificate Management Engineer to manage enterprise Public Key Infrastructure (PKI), SSL/TLS certificates, encryption keys, and certificate lifecycle automation. The ideal candidate will have hands-on experience with enterprise certificate management platforms, Hardware Security Modules (HSMs), cloud key management services, and security automation.
The role involves ensuring secure certificate issuance, renewal, revocation, monitoring, and compliance across enterprise infrastructure, applications, and cloud environments.
Manage the end-to-end SSL/TLS certificate lifecycle, including certificate issuance, renewal, revocation, installation, and automation.
Administer PKI platforms and Certificate Authorities (CAs), including Microsoft CA, Venafi, DigiCert, Entrust, and Sectigo.
Manage Enterprise Key Management (EKM), cryptographic keys, HSMs, and key rotation processes.
Implement certificate discovery, inventory, monitoring, expiration alerts, and renewal automation.
Support cloud-based key management services such as Azure Key Vault, AWS Key Management Service (KMS), and Google Cloud KMS.
Troubleshoot certificate-related issues affecting applications, servers, APIs, network devices, and enterprise services.
Automate certificate and key management processes using PowerShell, Python, Bash, or REST APIs.
Ensure compliance with security policies, cryptographic standards, and applicable regulatory requirements.
Collaborate with Security, Infrastructure, Application, and DevOps teams to integrate certificate management into enterprise environments.
Support certificate and key management within hybrid cloud and on-premises environments.
Integrate certificate management practices into DevSecOps and CI/CD pipelines where applicable.
Support certificate and secret management for Kubernetes environments.
5+ years of hands-on experience in certificate management and PKI administration, with 6-8 years of overall relevant experience preferred.
Strong understanding of PKI architecture, SSL/TLS protocols, X.509 certificates, Certificate Signing Requests (CSRs), and Certificate Authorities.
Practical experience managing the certificate lifecycle, including issuance, renewal, revocation, deployment, and troubleshooting.
Hands-on experience with one or more enterprise PKI or certificate management platforms, such as Venafi, DigiCert, Entrust, Sectigo, or Microsoft PKI.
Experience with Enterprise Key Management solutions, including Azure Key Vault, AWS KMS, or equivalent platforms.
Knowledge of HSM technologies such as Thales, SafeNet, or Luna HSM.
Understanding of cryptographic algorithms and standards, including RSA, ECC, AES, and SHA-256.
Scripting experience using PowerShell, Python, or Bash for automation.
Knowledge of certificate discovery, expiration monitoring, alerting, and automated renewal processes.
Experience supporting hybrid cloud environments across Azure, AWS, or Google Cloud Platform.
Knowledge of DevSecOps practices and CI/CD integration.
Experience managing certificates and secrets in Kubernetes environments.
Familiarity with enterprise security governance, cryptographic key rotation, and security compliance requirements.
Relevant certifications, such as CISSP, AZ-500 (Microsoft Azure Security Engineer), or a recognized PKI professional certification.
Founded in 2007, Purple Drive started as a tech solutions firm and has grown into a full-service consulting and talent partner. We help businesses navigate complex technology challenges while connecting top professionals with career-defining opportunities.
We believe in transforming businesses through smart IT solutions and empowering technologists to grow their expertise through challenging projects and meaningful partnerships. Built on over 20 years of trusted relationships, we create success stories for both our clients and the talented professionals who drive innovation forward.
To see how well you match this job, please log in or create an account.
Once logged in, be sure to complete your profile to get the most accurate match score.
Minneapolis, Minnesota
•
Today
Dear Supplier Partners, Looking for Venafi & Microsoft PKI Engineer for our client. Job Title: Venafi & Microsoft PKI Engineer Location :- Minneapolis, MN (Onsite) ROLE_DESCRIPTION We are seeking an experienced Venafi & Microsoft PKI Engineer to design, implement, administer, and support enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) solutions. The ideal candidate will have strong hands-on experience with Venafi, Microsoft ADCS (Active Directory Certific
Easy Apply
Full-time, Part-time, Contract, Third Party