PKI Engineer

Description

Design and deploy on-premises PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and related components.
Develop and implement PKI policies, procedures, and best practices to ensure the security, integrity, and availability of digital certificates and cryptographic keys.
Knowledge of the day-to-day operation of the PKI infrastructure, including certificate issuance, revocation, and renewal processes.
Monitor and troubleshoot PKI infrastructure components to identify and resolve any operational issues or security vulnerabilities.
Collaborate with cross-functional teams to integrate PKI services with other systems and application -Secure Remote Access - within the organization.
Stay up-to-date with industry trends, standards, and regulations related to PKI and ensure compliance with applicable requirements.
Develop implementation documentation, including system configurations, operational procedures, and incident response plans.
Provide technical expertise and support to internal stakeholders, including developers, system administrators, and security teams.

Responsibilities

• Bachelor's degree in computer science, information security, or a related field, with 5 years experience. Relevant certifications (e.g., CISSP, CISM, Microsoft PKI) are highly desirable.
• Proven experience in managing on-premises PKI infrastructure, including the design, implementation, and operation of CAs, RAs, and associated components.
• Deep understanding of PKI concepts, including digital certificates, cryptographic algorithms, key management, and certificate lifecycle management.
• Proficiency in configuring and managing PKI systems, such as Microsoft Active Directory Certificate Services (AD CS) or other enterprise-grade PKI solutions.
• Strong knowledge of security protocols and standards, including X.509, PKCS, SSL/TLS, and related cryptographic technologies.
• Experience with PKI-related tools and utilities for certificate management, monitoring, and troubleshooting.
• Familiarity with network and system security concepts, including firewalls, intrusion detection systems, and secure communications.
• Strong analytical and problem-solving skills, with the ability to quickly identify and resolve complex PKI-related issues.
• Excellent communication and interpersonal skills to collaborate effectively with cross-functional teams and stakeholders.
• Attention to detail and the ability to work independently and manage multiple tasks simultaneously.