> Markdown version of [/jobs/ext/3076749-pki-engineer](https://www.wearedevelopers.com/jobs/ext/3076749-pki-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # PKI Engineer - **Company:** The Intersect Group - **Location:** United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Active Directory, Amazon Web Services, Microsoft Azure, Cloud Computing, CompTIA Security+, Cyber Security, Hardware Security Module, Virtual Private Networks (VPN), Key Management, Automation of Marketing, Microsoft Security Essentials, Network Architecture, Public Key Infrastructure, X.509, Windows PowerShell, Cloud Services, Zero Trust Network Access, Software Vulnerability Management, SSL Certificate Management, Scripting, Transport Layer Security, Google Cloud, Software Troubleshooting, Infrastructure Automation Frameworks, Information Technology, Network Server - **Published:** September 25, 2026 - **Apply:** https://www.dice.com/job-detail/69fc4209-8998-4e98-9861-20f1732ab540 ## About the Role * 3-5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security. * Hands-on experience administering Microsoft Active Directory Certificate Services (AD CS) or similar enterprise PKI solutions. * Strong understanding of PKI concepts, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles. * Experience with certificate enrollment, issuance, renewal, revocation, and validation processes. * Knowledge of Hardware Security Modules (HSMs) and cryptographic key management practices. * Experience with PowerShell or other scripting and automation tools. * Strong troubleshooting, analytical, and technical documentation skills., * Experience with enterprise certificate management platforms such as Venafi, Keyfactor, or DigiCert. * Familiarity with cloud-based certificate management services in Azure, AWS, or Google Cloud Platform. * Knowledge of Zero Trust security principles and modern authentication technologies. * Understanding of security compliance frameworks and risk management practices. * Experience supporting large-scale enterprise infrastructure environments., * Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience. * Security certifications such as Security+, CISSP, GSEC, or equivalent preferred. * Microsoft security, identity, or cloud certifications are a plus. Key Skills * Public Key Infrastructure (PKI) Administration * Certificate Lifecycle Management * Cryptography & Key Management * SSL/TLS Security * Certificate Automation & Governance * Security Compliance & Risk Management * Technical Documentation * Incident Analysis & Troubleshooting * PowerShell Scripting & Automation Additional Information * Ability to participate in planned maintenance windows, certificate renewals, and incident response activities as needed. * Occasional after-hours support may be required. * Experience working in complex enterprise environments is highly preferred. ## Description We are seeking a skilled and motivated PKI Engineer to join our Infrastructure and Security team. This individual will be responsible for designing, administering, securing, and maintaining Public Key Infrastructure (PKI) environments. The role includes managing the lifecycle of digital certificates, certificate authorities, cryptographic services, and related security controls to ensure the confidentiality, integrity, and availability of enterprise systems and applications., * Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), Hardware Security Modules (HSMs), OCSP responders, and certificate enrollment services. * Oversee certificate lifecycle management, including issuance, renewal, revocation, and replacement of digital certificates for users, devices, applications, servers, cloud services, and network infrastructure. * Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards. * Design, deploy, and support automated certificate management solutions using tools and technologies such as Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting/automation platforms. * Manage cryptographic key generation, storage, rotation, escrow, and retirement processes. * Troubleshoot and resolve certificate-related issues affecting applications, websites, VPNs, and authentication services. * Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams. * Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives. ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)