On-Site Senior PKI Engineer: Enterprise PKI, Automation HSM

Insight Global; Charlotte (NC); On-site; USD 120,000 - 140,000; Full time

Job summary

A leading IT consultancy seeks a Senior PKI Engineer to enhance their Global Information Security team. This role focuses on designing and maintaining enterprise-grade PKI services, particularly with Microsoft Active Directory Certificate Services. The candidate will need significant experience with certificate lifecycle management and key protection. This position requires strong scripting skills in PowerShell or Python, alongside deep knowledge of security protocols. The job offers an on-site working environment in Charlotte, NC, or Denver, CO.

Qualifications

• 8+ years in Security Engineering or Identity Infrastructure.
• 5+ years hands-on with Microsoft AD CS and enterprise PKI.
• Deep knowledge of X.509, CRLs, OCSP, EKUs, RSA/ECC, SHA-2.
• Strong PowerShell, Python, or C# scripting and Windows Server administration skills.
• Experience with Linux PKI, TLS/SSL, VPN authentication.
• Azure PKI integrations and HSM experience.

Responsibilities

• Design and maintain enterprise PKI architectures.
• Integrate PKI with Active Directory and Azure AD.
• Develop certificate lifecycle policies.
• Manage certificate lifecycle automation.
• Operat and maintain secure PKI infrastructure.
• Lead incident response for PKI-related outages.

Skills

Security Engineering

Identity Infrastructure

Microsoft AD CS

X.509

PowerShell scripting

Python

C# scripting

Linux PKI

Tools

Active Directory

HSM (Thales, Entrust, nCipher)

Azure AD

Job description

A leading IT consultancy seeks a Senior PKI Engineer to enhance their Global Information Security team. This role focuses on designing and maintaining enterprise-grade PKI services, particularly with Microsoft Active Directory Certificate Services. The candidate will need significant experience with certificate lifecycle management and key protection. This position requires strong scripting skills in PowerShell or Python, alongside deep knowledge of security protocols. The job offers an on-site working environment in Charlotte, NC, or Denver, CO.