Haystack
← Back to Jobs
Engineering
XF

PKI Engineer

XFORIA IncIrving, TX🇺🇸United StatesPosted Sep 23, 2026

Quick Overview

Seniority
Mid Senior
Work mode
On Site
Location
Irving, TX, United States
Posted
1 week ago

Job Description

Job title: PKI Engineer
Location: Irving, TX - 5 days onsite
12 months
We are seeking a skilled and motivated PKI Engineer to join our Infrastructure and Security team. This role is responsible for designing, administering, securing, and maintaining the organization's Public Key Infrastructure (PKI) environment. The engineer will manage the lifecycle of digital certificates, certificate authorities, cryptographic services, and related security controls to ensure the confidentiality, integrity, and availability of enterprise systems and applications.
Key Responsibilities
  • PKI Infrastructure Administration: Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), HSMs, OCSP responders, and certificate enrollment services.
  • Certificate Lifecycle Management: Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances.
  • PKI Security & Compliance: Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards.
  • Certificate Automation & Integration: Design and support automated certificate management solutions using Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies.
  • Cryptographic Key Management: Manage cryptographic key generation, storage, rotation, escrow, and destruction processes.
  • Troubleshooting & Support: Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems.
  • PKI Standards & Documentation: Develop and maintain PKI architecture diagrams, procedures, technical documentation, and governance standards.
  • Security Operations & Continuous Improvement: Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts.
Required Qualifications (Non-Negotiable) 
  • Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
  • Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles.
  • Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
  • Knowledge of HSMs and cryptographic key management.
  • Strong troubleshooting, analytical, and documentation skills.
  • Experience with PowerShell or other automation/scripting technologies.
Nice-to-Have Qualifications (Desired but Not Required)
  • Public Key Infrastructure Administration
  • Certificate Lifecycle Management
  • Cryptography & Key Management
  • SSL/TLS Security
  • Certificate Automation & Governance
  • Security Compliance & Risk Management
  • Technical Documentation
  • Incident Analysis & Troubleshooting
Education & Certification Requirements
  • Bachelor's degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience).
  • Security+, CISSP, GSEC, or equivalent security certifications.
  • Microsoft security or identity certifications preferred.
  • Experience with Azure, AWS, or Google Cloud Platform certificate management services.
  • Knowledge of Zero Trust principles and modern authentication technologies.

Similar jobs

Browse related jobs

Apply now