PKI Architecture Support Analyst

Job Title: PKI Architecture Support Analyst

Location: Denver, CO

Employment Type: Full-time

Job Description:

PKI Architecture Support Analyst

Must Have Technical/Functional Skills

5+ years of experience in Certificate Management and PKI administration.

Strong understanding of:

PKI architecture

SSL/TLS protocols

X.509 certificates

Certificate Signing Requests (CSR)

Certificate Authorities (CA)

Hands-on experience with:

Venafi, DigiCert, Entrust, Sectigo, or Microsoft PKI

Azure Key Vault, AWS KMS, or equivalent EKM solutions

HSM technologies (Thales, SafeNet, Luna HSM)

Experience managing certificate lifecycle automation.

Knowledge of cryptographic algorithms (RSA, ECC, AES, SHA-256).

Scripting experience in PowerShell, Python, or Bash

Roles & Responsibilities

Manage end-to-end SSL/TLS certificate lifecycle including issuance, renewal, revocation, and automation.

Administer Public Key Infrastructure (PKI) platforms such as Microsoft CA, DigiCert, Venafi, Entrust, or Sectigo.

Manage Enterprise Key Management (EKM), encryption keys, HSMs (Hardware Security Modules), and key rotation processes.

Implement certificate discovery, monitoring, and expiration alerting.

Support cloud-based key management services (Azure Key Vault, AWS KMS, Google Cloud KMS).

Ensure compliance with security standards and regulatory requirements.

Troubleshoot certificate-related issues impacting applications, servers, APIs, and network devices.

Automate certificate and key management processes using PowerShell, Python, or REST APIs.

Collaborate with Security, Infrastructure, Application, and DevOps teams.