PKI Engineer

Job Description

Our client is seeking a skilled and motivated PKI Engineer to join their Infrastructure and Security team. This role is responsible for designing, administering, securing, and maintaining the organization's Public Key Infrastructure (PKI) environment. The engineer will manage the lifecycle of digital certificates, certificate authorities, cryptographic services, and related security controls to ensure the confidentiality, integrity, and availability of enterprise systems and applications. 

Key Responsibilities:

• PKI Infrastructure Administration: Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), HSMs, OCSP responders, and certificate enrollment services. 
• Certificate Lifecycle Management: Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances. 
• PKI Security & Compliance: Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards. 
• Certificate Automation & Integration: Design and support automated certificate management solutions using Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies. 
• Cryptographic Key Management: Manage cryptographic key generation, storage, rotation, escrow, and destruction processes. 
• Troubleshooting & Support: Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems. 
• PKI Standards & Documentation: Develop and maintain PKI architecture diagrams, procedures, technical documentation, and governance standards. 
• Security Operations & Continuous Improvement: Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts. 

Expectations:

• Full-time, on-site position based in Irving, TX. 
• Occasional after-hours support may be required. 
• Participation in certificate renewals, maintenance windows, and emergency security response activities when necessary. 

Years of Experience:

• 3-5 years of PKI engineering, information security, or infrastructure security experience. 
• Required Qualifications (Non-Negotiable): 
• Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms. 
• Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles. 
• Experience with certificate enrollment, issuance, renewal, revocation, and validation processes. 
• Knowledge of HSMs and cryptographic key management. 
• Strong troubleshooting, analytical, and documentation skills. 
• Experience with PowerShell or other automation/scripting technologies. 

Nice-to-Have Qualifications (Desired but Not Required):

• Public Key Infrastructure Administration 
• Certificate Lifecycle Management 
• Cryptography & Key Management 
• SSL/TLS Security 
• Certificate Automation & Governance 
• Security Compliance & Risk Management 
• Technical Documentation 
• Incident Analysis & Troubleshooting 

Education & Certification Requirements:

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience). 
• Security+, CISSP, GSEC, or equivalent security certifications. 
• Microsoft security or identity certifications preferred. 
• Experience with Azure, AWS, or Google Cloud Platform certificate management services. 
• Knowledge of Zero Trust principles and modern authentication technologies. 

Preferred Industry Experience:

• Convenience Retail 
• Fuel Operations 
• Supply Chain 
• Enterprise Infrastructure Operations 

Salary/Rate: $55-$70/HR (depends on experience level). This is a contract position with candidates expected to work 40 hours/ week.