AI-Driven PKI Engineer for Certificate Automation

ITVA, Inc.; Oregon; Hybrid; USD 140,000 - 210,000; Full time

Job summary

ITVA, Inc. is seeking an experienced Forward Deployed PKI Engineer to deploy certificate lifecycle management and AI-driven automation in enterprise environments.

You will work with customers to modernize certificate operations, automate PKI workflows, and influence product direction in the area of post-quantum readiness. You will collaborate with IT and security teams, design scalable PKI solutions, and help define the future of enterprise certificate management.

Qualifications

• 7+ years of hands-on enterprise PKI experience.
• Deep understanding of X.509 certificates, certificate chains, trust models, TLS, and mutual TLS.
• Extensive experience administering Microsoft Active Directory Certificate Services (AD CS) or comparable PKI systems.
• Strong knowledge of certificate issuance, renewal, revocation, CRLs, OCSP, CSRs, and certificate templates.
• Experience managing certificates across Windows and Linux servers and enterprise applications.
• Proven ability to troubleshoot complex PKI and cryptographic issues independently.
• Experience with scripting for automation (PowerShell, Python, Bash).
• Strong communication skills and experience collaborating with enterprise customers.

Responsibilities

• Lead deployments of ITVA's certificate lifecycle management across complex enterprise environments.
• Integrate ITVA with enterprise CAs (AD CS and commercial CA platforms).
• Implement AI-powered certificate discovery, monitoring, and lifecycle automation workflows.
• Automate certificate issuance, renewal, revocation, and deployment across diverse systems.
• Collaborate with customer security, infrastructure, and PKI teams to understand challenges.
• Troubleshoot PKI issues involving chains, trust stores, TLS, and enrollment protocols.
• Help enterprises evaluate cryptographic risks and post-quantum readiness.
• Collaborate with ITVA's software engineers to design new product features and integrations.
• Translate customer requirements into scalable product improvements.
• Serve as trusted advisor for PKI modernization initiatives.

Skills

Enterprise PKI

X.509 certificates

AD CS

TLS/mTLS

PKI automation

PowerShell/Python/Bash

Communication with customers

AI-driven security

Tools

AD CS

DigiCert

Venafi

Keyfactor

Sectigo

HSMs

Job description

ITVA, Inc. is seeking an experienced Forward Deployed PKI Engineer to deploy certificate lifecycle management and AI-driven automation in enterprise environments.

You will work with customers to modernize certificate operations, automate PKI workflows, and influence product direction in the area of post-quantum readiness. You will collaborate with IT and security teams, design scalable PKI solutions, and help define the future of enterprise certificate management.