> Markdown version of [/jobs/ext/1002916-senior-certificate-engineer-pki-active-directory](https://www.wearedevelopers.com/jobs/ext/1002916-senior-certificate-engineer-pki-active-directory). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Certificate Engineer (PKI / Active Directory) - **Company:** Gainwell Technologies - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $85,000.0 - $121,400.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, User Authentication, Microsoft Azure, Key Management, Windows Servers, Public Key Infrastructure, X.509, Windows PowerShell, Azure Active Directory, Smart Cards, SSL Certificate Management, Transport Layer Security, System Availability, Delivery Pipeline, Information Technology, 3-tier Architectures, Servicenow - **Published:** June 9, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=702ba598e4015566 ## About the Role Do you have experience in Windows?, Do you have a Bachelor's degree?, * Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience) * 7+ years of experience in: * Enterprise PKI engineering * Active Directory administration Strong experience with: * Active Directory Certificate Services (AD CS) * Windows Server environments * Public certificate authorities (DigiCert, Entrust, Sectigo, etc.) Proficiency in scripting and automation (PowerShell preferred) Deep understanding of: * X.509 certificates * TLS/SSL protocols * Cryptographic algorithms and standards ## Description We are seeking a highly skilled Senior Certificate Engineer to design, implement, and manage enterprise Public Key Infrastructure (PKI) solutions. This role will focus on Active Directory Certificate Services (AD CS), public certificate authority integrations, and end-to-end certificate lifecycle management across hybrid environments. The ideal candidate has deep expertise in Microsoft PKI architecture, certificate automation, and identity/security integration, along with experience working with public CAs (e.g., DigiCert, Entrust, Sectigo) in a large-scale enterprise environment. Your role in our mission PKI Architecture & Engineering * Design and maintain enterprise PKI solutions, including offline root CAs, issuing CAs, and certificate policies * Lead PKI modernization efforts, including hybrid and cloud-integrated certificate services * Architect solutions that support high availability, scalability, and security compliance Active Directory Integration * Implement and manage Active Directory Certificate Services (AD CS) * Configure and maintain: * Certificate templates * Group Policy-based auto-enrollment * CRL distribution points (CDPs) and AIA locations Integrate PKI with Active Directory, Azure AD, and hybrid identity environments Public Certificate Authority Management * Manage enterprise relationships and integrations with external/public CAs * Oversee procurement, issuance, renewal, and revocation of public SSL/TLS certificates * Integrate public CA services into automation workflows and enterprise platforms Certificate Lifecycle Management * Manage certificate lifecycle processes including: * Issuance * Renewal * Revocation * Expiration monitoring Implement automation using tools such as: * PowerShell * ACME / EST / SCEP protocols * Certificate management platforms Security & Compliance * Ensure PKI solutions meet enterprise security policies and regulatory requirements (e.g., NIST, CIS, HIPAA, PCI) * Conduct risk assessments related to certificate usage and cryptographic standards * Maintain secure key management practices, including HSM integration where applicable Operations & Troubleshooting * Provide Tier 3 escalation support for PKI and certificate-related issues * Troubleshoot: * Authentication failures (TLS, smart card, etc.) * Certificate chain issues * Revocation and CRL distribution problems Develop monitoring, alerting, and reporting for certificate health and usage Automation & Innovation * Develop and maintain automation scripts and workflows for certificate deployment and management * Integrate PKI processes with: * ServiceNow * Azure services * DevOps pipelines ## Related Videos - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [Fake or News: LLMs Protect Each Other, Google Predicts Floods, and GitHub Copilot Loves COBOL - Niels Leenheer](https://www.wearedevelopers.com/videos/1860-fake-or-news-llms-protect-each-other-google-predicts-floods-and-github-copilot-loves-cobol-niels-leenheer) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Passwordless Web 1.5](https://www.wearedevelopers.com/videos/1216-passwordless-web-1-5) - [Extending HTML with Web Components](https://www.wearedevelopers.com/videos/459-extending-html-with-web-components) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) ## Related Articles - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)