Job Summary
Job Summary:
We are looking for a highly experienced Level 3 PKI Engineer to architect, design, and manage enterprise PKI solutions. The candidate will be responsible for building and maintaining secure certificate infrastructures, defining governance standards, and ensuring end-to-end lifecycle management of digital certificates.
Key Responsibilities
Key Responsibilities:
- Architect and design enterprise PKI infrastructure (Root CA, Intermediate CA, issuing CAs)
- Define certificate lifecycle management (CLM) strategies and automation
- Design and manage certificate policies, templates, and governance frameworks
- Implement and manage Internal CA (Microsoft ADCS or equivalent)
- Ensure high availability and security of PKI infrastructure
- Manage CRL, OCSP, key escrow, and revocation services
- Integrate PKI with enterprise applications, devices, and cloud services
- Lead troubleshooting of complex certificate and trust issues
- Conduct audits, compliance checks, and risk assessments for PKI
- Work with HSMs for secure key storage and lifecycle management
- Mentor L1/L2 engineers and act as escalation point
Skill Requirements
Required Skills:
- Strong expertise in PKI architecture and certificate lifecycle management
- Hands-on experience with Microsoft ADCS and enterprise PKI environments
- Deep understanding of encryption, TLS/SSL, and key management
- Experience with CRL, OCSP, certificate templates, and auto-enrollment
- Knowledge of Active Directory and Azure AD integration
- Strong troubleshooting and problem-solving skills
Other Requirements
Good to Have:
- Experience with HSM integration (Thales, SafeNet, etc.)
- Knowledge of cloud PKI (Azure Key Vault, AWS ACM)
- Automation skills (PowerShell, Python)
Certifications (Preferred):
- CISSP / CISM
- Microsoft Security Certifications (SC-300 / SC-400)
Soft Skills:
- Strong leadership and stakeholder management
- Excellent communication and documentation skills
- Ability to drive strategic PKI initiatives
- Mentoring and team development