IT Security PKI Engineer
Location: REMOTE [No Second Jobs]
Contact: /
Role
Experienced PKI Engineer to support applications with PKI integrations, enhance and maintain PKI systems, and maintain process documentation.
Responsibilities
• Administer enterprise certificate management tools.
• Manage certificate issuance, renewal, revocation, and replacement activities.
• Monitor certificate expiration events and coordinate proactive renewals with application teams.
• Assist teams with certificate integrations, migrations, and troubleshooting.
• Support Root and Issuing CA operations, including upgrades, maintenance, and migrations.
• Design, configure, and maintain certificate templates.
• Manage certificate enrollment policies and auto-enrollment configurations.
• Ensure the timely publication and distribution of CRLs.
• Troubleshoot revocation validation issues and trust path failures.
Qualifications
• 5+ years of experience supporting PKI environments, including CA operations and application integrations.
• Experience with private key management and protection.
• Experience with certificate stores across cloud platforms, Linux, and IIS.
• Experience with EJBCA / Key factor and Microsoft Certificate Authority.
• Experience with enterprise certificate lifecycle management tools.
• Experience troubleshooting certificate installation and validation issues.
• Familiarity with HSMs.
• Familiarity with "dual control" and "split knowledge" concepts.
• Understanding of code signing and timestamping.
· Understanding symmetric and asymmetric cryptographic algorithms.
Contact: /