PKI Engineer
New
BrazilFull-TimeMiddle
Salary15 - 25 USD per hour
Apply NowOpens the employer's application page
Job Details
Requirements
- Microsoft Active Directory Certificate Services (ADCS) expertise
- Experience with AWS ACM/PCA and Venafi
- Knowledge of NDES, SCEP, OCSP, and CRLs
- Proficiency in PowerShell scripting and automation
- Understanding of X.509, TLS, RSA, and ECC cryptography
- Experience with HSM and TPM key management
- Knowledge of AD, DNS, and IAM operations
- Familiarity with CyberArk Privilege Cloud
Responsibilities
- Manage enterprise PKI infrastructure including Root and Issuing Certificate.
- Manage certificate lifecycle activities: issuance, renewal, revocation, rekey, rollover, and retirement.
- Configure and maintain Offline Root CA, Issuing CAs, certificate templates/profiles, and policy constraints.
- Manage CRL/OCSP publishing and ensure high availability.
- Support audits and compliance requirements, including CAB Forum standards.
- Manage and monitor PKI/HSM operations end-to-end, including health checks and backups.
- Implement and maintain processes for internal and external certificate lifecycles.
- Integrate PKI solutions across network devices, load balancers, and Windows/Linux environments.
View Full Description & ApplyYou'll be redirected to the employer's site
