Public Key Infrastructure Engineer

SeniorPKIEngineer

• Lead and manage certificate lifecycle operations, including issuance, renewal, revocation, and monitoring of digital certificates across enterprise environments.
• Demonstrate deep expertise in encryption standards, cryptographic protocols, andPKIcomponents such as X.509 certificates, RSA, ECC, and SHA algorithms.
• Administer and integrate Certificate Authorities (CAs)including public and private CAs, with a strong understanding of trust models and hierarchicalPKIstructures.
• Hands-on experience with AWS Certificate Manager (ACM)and other cloud-native certificate services for secure deployment and management of TLS/SSL certificates.
• Implement and maintain certificate services in multi-cloud environments, including AWS, Azure, and other public cloud platforms, ensuring compliance and security best practices.
• Configure and manage Active Directory Certificate Services (AD CS)for enterprise certificate issuance, group policies, and auto-enrollment.
• Develop and maintain automation scriptsusing PowerShell, Python, or Bash to streamline certificate operations and reduce manual overhead.
• Design and enforce security policiesrelated toPKI, including key management, certificate validation, and secure storage of private keys.
• Establish robust reporting and auditing mechanismsfor certificate usage, expiration tracking, and compliance with internal and external regulations.
• Collaborate with security, infrastructure, and DevOps teamsto integratePKIsolutions into CI/CD pipelines, applications, and network infrastructure.
• Strong knowledge of Venafi.