Public Key Infrastructure Engineer

Senior PKI Engineer

• Lead and manage certificate lifecycle operations, including issuance, renewal, revocation, and monitoring of digital certificates across enterprise environments.
• Demonstrate deep expertise in encryption standards, cryptographic protocols, and PKI components such as X.509 certificates, RSA, ECC, and SHA algorithms.
• Administer and integrate Certificate Authorities (CAs) including public and private CAs, with a strong understanding of trust models and hierarchical PKI structures.
• Hands-on experience with AWS Certificate Manager (ACM) and other cloud-native certificate services for secure deployment and management of TLS/SSL certificates.
• Implement and maintain certificate services in multi-cloud environments, including AWS, Azure, and other public cloud platforms, ensuring compliance and security best practices.
• Configure and manage Active Directory Certificate Services (AD CS) for enterprise certificate issuance, group policies, and auto-enrollment.
• Develop and maintain automation scripts using PowerShell, Python, or Bash to streamline certificate operations and reduce manual overhead.
• Design and enforce security policies related to PKI, including key management, certificate validation, and secure storage of private keys.
• Establish robust reporting and auditing mechanisms for certificate usage, expiration tracking, and compliance with internal and external regulations.
• Collaborate with security, infrastructure, and DevOps teams to integrate PKI solutions into CI/CD pipelines, applications, and network infrastructure.
• Strong knowledge of Venafi.