Senior PKI Engineer

Responsibilities:

Design and Implementation:

• Architect and implement PKI solutions, including root CA, intermediate CAs, and associated policies.
• Develop and enforce PKI policies, procedures, and best practices.
• Design and manage certificate templates and issuance policies.

Maintenance and Management:

• Oversee the day-to-day operations of PKI environments.
• Perform regular audits of PKI systems and processes.
• Ensure high availability and disaster recovery for PKI systems.

Security and Compliance:

• Ensure compliance with industry standards and regulations, such as NIST 800-53 and FIPS.
• Implement and manage hardware security modules (HSMs) for secure key management.
• Perform security assessments and risk management for PKI systems.

Certificate Lifecycle Management:

• Manage the lifecycle of digital certificates, including issuance, renewal, and revocation.
• Troubleshoot and resolve PKI-related issues for internal and external stakeholders.
• Integrate PKI with other security technologies and applications.

Documentation and Training:

• Create and maintain detailed documentation for PKI systems and processes.
• Train and mentor other staff on PKI-related topics and best practices.

What Were Looking For:

• Degree in Computer Science, IT, or equivalent area of technical study.
• Minimum of 7 years of experience in PKI management and implementation.
• Proven track record in designing and setting up PKI environments, including root CAs, intermediate CAs, and policies.
• Deep understanding of PKI concepts, cryptography, and secure key management.
• Experience with hardware security modules (HSMs) and certificate management systems.
• Proficiency in scripting languages (e.g., PowerShell, Python) for automation.
• Relevant certifications such as CISSP, SSCP, CompTIA Security+, or equivalent.
• PKI-specific certifications are a plus (e.g., Certified PKI Professional).
• Deep understanding of PKI concepts, cryptography, and secure key management.
• Experience with hardware security modules (HSMs) and certificate management systems.
• Proficiency in scripting languages (e.g., PowerShell, Python) for automation.
• Experience with Entra ID, Active Directory, secrets management systems, authentication and authorization protocols are beneficial.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.