PKI Engineer

• We are seeking a skilled and detail-oriented PKI Engineer to design, implement, and maintain Public Key Infrastructure (PKI) systems across internal and external environments.
• The ideal candidate will have hands-on experience with Microsoft ADCS, certificate lifecycle management, and integration with external PKI providers.
• This role is critical to ensuring secure authentication, encryption, and digital signing across enterprise systems.

• Design, deploy, and manage Internal CA hierarchy (Root CA, Subordinate CA) using Microsoft ADCS.
• Integrate and manage External PKI services (e.g., DigiCert) for public-facing applications and services.
• Implement and maintain certificate lifecycle management using platforms like Venafi
• Ensure compliance with security policies, certificate best practices, and industry standards (e.g., NIST).
• Manage CRL and OCSP configurations, including load balancing and high availability.
• Monitor and troubleshoot PKI-related issues including certificate enrollment, revocation, and authentication failures.
• Collaborate with security, infrastructure, and application teams to support secure communications and identity assurance.
• Maintain documentation for PKI architecture, processes, and operational procedures.
• Support code signing, document signing, and device authentication use cases.
• Evaluate and implement post-quantum cryptography readiness strategies.

• EXP- 5 to 9 years

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 5+ years of experience in PKI engineering or related security infrastructure roles.
• Strong knowledge of Microsoft ADCS, including offline Root CA and online Subordinate CA setup.
• Experience with HSMs (Hardware Security Modules) for key protection.
• Familiarity with external PKI providers and certificate issuance processes.
• Understanding of X.509 certificate standards, TLS/SSL
• Experience with certificate automation tools (e.g., Venafi, ACME clients).
• Knowledge of Active Directory, LDAP, and Kerberos authentication.
• Awareness of quantum-safe cryptography and emerging PKI trends.
• Strong analytical and problem-solving skills.
• Excellent communication and documentation abilities.

Preferred Certifications

• Microsoft Certified: Cybersecurity Architect / Identity and Access Administrator
• Certified Information Systems Security Professional (CISSP)
• Certified PKI Professional (CPKI)
• Venafi or Keyfactor platform certifications (if applicable)