Senior PKI Engineer

Job Description: We are seeking a highly experienced Senior PKI Engineer to join our team. The ideal candidate will have extensive expertise in designing, implementing, and managing Public Key Infrastructure (PKI) environments, including root Certificate Authorities (CAs), intermediate CAs, and PKI policies. This role involves hands-on work with cryptographic services, certificate lifecycle management, and ensuring the security and compliance of our PKI systems. Responsibilities: Design and Implementation : Architect and implement PKI solutions, including root CA, intermediate CAs, and associated policies. Develop and enforce PKI policies, procedures, and best practices. Design and manage certificate templates and issuance policies. Maintenance and Management : Oversee the day-to-day operations of PKI environments. Perform regular audits of PKI systems and processes. Ensure high availability and disaster recovery for PKI systems. Security and Compliance : Ensure compliance with industry standards and regulations, such as NIST 800-53 and FIPS. Implement and manage hardware security modules (HSMs) for secure key management. Perform security assessments and risk management for PKI systems. Certificate Lifecycle Management : Manage the lifecycle of digital certificates, including issuance, renewal, and revocation. Troubleshoot and resolve PKI-related issues for internal and external stakeholders. Integrate PKI with other security technologies and applications. Documentation and Training : Create and maintain detailed documentation for PKI systems and processes. Train and mentor other staff on PKI-related topics and best practices. What Were Looking For: Degree in Computer Science, IT, or equivalent area of technical study. Minimum of 7 years of experience in PKI management and implementation. Proven track record in designing and setting up PKI environments, including root CAs, intermediate CAs, and policies. Deep understanding of PKI concepts, cryptography, and secure key management. Experience with hardware security modules (HSMs) and certificate management systems. Proficiency in scripting languages (e.g., PowerShell, Python) for automation. Relevant certifications such as CISSP, SSCP, CompTIA Security+, or equivalent. PKI-specific certifications are a plus (e.g., Certified PKI Professional). Deep understanding of PKI concepts, cryptography, and secure key management. Experience with hardware security modules (HSMs) and certificate management systems. Proficiency in scripting languages (e.g., PowerShell, Python) for automation. Experience with Entra ID, Active Directory, secrets management systems, authentication and authorization protocols are beneficial. Strong analytical and problem-solving skills. Excellent written and verbal communication skills. Ability to work independently and as part of a team.