PKI / SSL Certificate Management Engineer

Job Title : PKI / SSL Certificate Management Engineer

Location : Denver, CO 100% onsite.

JD :

Role Descriptions: Manage end-to-end SSLTLS certificate lifecycle including issuance| renewal| revocation| and automation.Administer Public Key Infrastructure (PKI) platforms such as Microsoft CA| DigiCert| Venafi| Entrust| or Sectigo.Manage Enterprise Key Management (EKM)| encryption keys| HSMs (Hardware Security Modules)| and key rotation processes.Implement certificate discovery| monitoring| and expiration alerting.Support cloud-based key management services (Azure Key Vault| AWS KMS| Google Cloud KMS).Ensure compliance with security standards and regulatory requirements.Troubleshoot certificate-related issues impacting applications| servers| APIs| and network devices.Automate certificate and key management processes using PowerShell| Python| or REST APIs.Collaborate with Security| Infrastructure| Application| and DevOps teams.
Essential Skills: Role Requirements 5 years of experience in Certificate Management and PKI administration. Strong understanding of oPKI architecture SSLTLS protocolsoX.509 certificates Certificate Signing Requests (CSR) Certificate Authorities (CA)Hands-on experience with Venafi| DigiCert| Entrust| Sectigo| or Microsoft PKI Azure Key Vault| AWS KMS| or equivalent EKM solutions HSM technologies (Thales| SafeNet| Luna HSM)Experience managing certificate lifecycle automation. Knowledge of cryptographic algorithms (RSA| ECC| AES| SHA-256).Scripting experience in PowerShell| Python| or Bash. Preferred Experience in hybrid cloud environments (Azure| AWS| Google Cloud Platform).Knowledge of DevSecOps and CICD integration. Experience with Kubernetes secrets and certificate management. Security certifications such as CISSP Security Azure Security Engineer (AZ-500) Certified PKI Professional
Skills: Cyber Security
Experience Required: 6-8