Onsite PKI Engineer: Cert Lifecycle & Cloud Security

Motion Recruitment; Irving (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Motion Recruitment is seeking a fully onsite PKI Engineer for a 12-month contract in Irving, TX. The ideal candidate will handle PKI, certificate lifecycle, and automation across enterprise platforms.

Responsibilities include managing PKI infrastructure, issuing/renewing certificates, enforcing security controls, and integrating automation with Venafi, Keyfactor, DigiCert, and ACME via scripting tools such as PowerShell.

Qualifications

• Bachelor’s degree in IT, CS, Cybersecurity, or related field or equivalent experience.
• Security certifications (CISSP, GSEC or equivalent) and Microsoft security/identity certifications preferred.
• Experience with Azure, AWS, or GCP certificate management services.
• Knowledge of Zero Trust and modern authentication technologies.
• 3–5 years PKI engineering or information security experience.
• Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Strong PKI concepts: certificate lifecycle, SSL/TLS, X.509, cryptography.
• Experience with certificate enrollment, issuance, renewal, revocation, validation.
• Knowledge of HSMs and cryptographic key management.
• PowerShell or other automation/scripting experience.
• Strong troubleshooting, analytical, and documentation skills.

Responsibilities

• Manage and maintain enterprise PKI platforms including CAs, RAs, HSMs, OCSP responders, and enrollment services.
• Issue, renew, revoke, and replace certificates for users, devices, servers, apps, cloud services, and network devices.
• Implement PKI security controls, policies, and cryptographic standards.
• Design and support automated certificate management using AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting.
• Manage cryptographic keys generation, storage, rotation, escrow, destruction.
• Diagnose and resolve certificate-related issues across apps, websites, VPNs, auth systems.
• Develop PKI architecture diagrams, procedures, and governance documentation.
• Participate in security assessments, incident investigations, vulnerability remediation, modernization efforts.

Skills

PKI engineering

Certificate lifecycle management

AD CS

SSL/TLS/X.509

HSMs / key management

Cloud certificate management

Zero Trust

PowerShell / scripting

Troubleshooting

Documentation

Education

Bachelor’s degree in IT/CS/Cybersecurity or related field

Tools

Microsoft AD CS

Venafi

Keyfactor

DigiCert

ACME protocols

Job description

Motion Recruitment is seeking a fully onsite PKI Engineer for a 12-month contract in Irving, TX. The ideal candidate will handle PKI, certificate lifecycle, and automation across enterprise platforms.

Responsibilities include managing PKI infrastructure, issuing/renewing certificates, enforcing security controls, and integrating automation with Venafi, Keyfactor, DigiCert, and ACME via scripting tools such as PowerShell.