PKI architecture Support Analyst-3

Realign Llc; Denver (CO); On-site; USD 125,000 - 155,000; Full time

Job summary

Realign Llc in Denver, CO is seeking a senior PKI/Certificate Management professional to own end-to-end certificate lifecycle across on-prem and cloud platforms.

You will manage PKI infrastructures (Microsoft CA, Venafi, DigiCert, Entrust, Sectigo), handle EKMs and HSMs, implement automation with PowerShell/Python, and collaborate with Security, Infrastructure, and DevOps teams to maintain compliance and secure applications and APIs.

Qualifications

• 5+ years of experience in Certificate Management and PKI administration.
• Strong understanding of PKI architecture, SSL/TLS protocols, X.509 certificates, CSR and CA.
• Hands-on experience with Venafi, DigiCert, Entrust, Sectigo, or Microsoft PKI.
• Azure Key Vault and AWS KMS or equivalent EKM solutions.
• HSM technologies (Thales Luna HSM) experience.
• Experience with certificate lifecycle automation and scripting.
• Knowledge of cryptographic algorithms such as RSA, ECC, AES, SHA-256.
• Scripting in PowerShell, Python, or Bash.
• Manage end-to-end SSL/TLS lifecycle including issuance, renewal, revocation, and automation.

Responsibilities

• Manage end-to-end SSL/TLS certificate lifecycle including issuance, renewal, revocation, and automation.
• Administer PKI platforms such as Microsoft CA, DigiCert, Venafi, Entrust, or Sectigo.
• Manage EKMs, encryption keys, and HSMs, including key rotation.
• Implement certificate discovery, monitoring, and expiration alerting.
• Support cloud-based key management services (Azure Key Vault, AWS KMS, Google Cloud KMS).
• Ensure compliance with security standards and regulatory requirements.
• Troubleshoot certificate-related issues affecting apps, servers, APIs, and network devices.
• Automate certificate and key management processes using PowerShell, Python, or REST APIs.
• Collaborate with Security, Infra, Applications, and DevOps teams.

Skills

PKI architecture

SSL/TLS protocols

X.509 certificates

CSR

Certificate Authorities

Cryptographic algorithms

PowerShell

Python

Bash

Certificate lifecycle management

REST APIs

Tools

Venafi

DigiCert

Entrust

Sectigo

Microsoft PKI

Azure Key Vault

AWS KMS

Thales Luna HSM

Job description

Job Description

• 5+ years of experience in Certificate Management and PKI administration.
• Strong understanding of:
  • SSL/TLS protocols
  • X.509 certificates
  • Certificate Signing Requests (CSR)
  • Certificate Authorities (CA)
• Hands-on experience with:
  • Venafi, DigiCert, Entrust, Sectigo, or Microsoft PKI
  • Azure Key Vault, AWS KMS, or equivalent EKM solutions
• Experience managing certificate lifecycle automation.
• Knowledge of cryptographic algorithms (RSA, ECC, AES, SHA-256).
• Scripting experience in PowerShell, Python, or Bash
• Manage end-to-end SSL/TLS certificate lifecycle including issuance, renewal, revocation, and automation.
• Administer Public Key Infrastructure (PKI) platforms such as Microsoft CA, DigiCert, Venafi, Entrust, or Sectigo.
• Manage Enterprise Key Management (EKM), encryption keys, HSMs (Hardware Security Modules), and key rotation processes.
• Implement certificate discovery, monitoring, and expiration alerting.
• Support cloud-based key management services (Azure Key Vault, AWS KMS, Google Cloud KMS).
• Ensure compliance with security standards and regulatory requirements.
• Troubleshoot certificate-related issues impacting applications, servers, APIs, and network devices.
• Automate certificate and key management processes using PowerShell, Python, or REST APIs.
• Collaborate with Security, Infrastructure, Application, and DevOps teams.

Required Skills

Job Type: Full Time

Job Category: IT

Job Description

PKI architecture Support Analyst

Denver, CO (Onsite)

Full Time

Job Description

Must Have Technical/Functional Skills

• 5+ years of experience in Certificate Management and PKI administration.
• Strong understanding of:
  • PKI architecture
  • SSL/TLS protocols
  • X.509 certificates
  • Certificate Signing Requests (CSR)
  • Certificate Authorities (CA)
• Hands-on experience with:
  • Venafi, DigiCert, Entrust, Sectigo, or Microsoft PKI
  • Azure Key Vault, AWS KMS, or equivalent EKM solutions
  • HSM technologies (Thales, SafeNet, Luna HSM)
• Experience managing certificate lifecycle automation.
• Knowledge of cryptographic algorithms (RSA, ECC, AES, SHA-256).
• Scripting experience in PowerShell, Python, or Bash

Roles & Responsibilities

• Manage end-to-end SSL/TLS certificate lifecycle including issuance, renewal, revocation, and automation.
• Administer Public Key Infrastructure (PKI) platforms such as Microsoft CA, DigiCert, Venafi, Entrust, or Sectigo.
• Manage Enterprise Key Management (EKM), encryption keys, HSMs (Hardware Security Modules), and key rotation processes.
• Implement certificate discovery, monitoring, and expiration alerting.
• Support cloud-based key management services (Azure Key Vault, AWS KMS, Google Cloud KMS).
• Ensure compliance with security standards and regulatory requirements.
• Troubleshoot certificate-related issues impacting applications, servers, APIs, and network devices.
• Automate certificate and key management processes using PowerShell, Python, or REST APIs.
• Collaborate with Security, Infrastructure, Application, and DevOps teams.

Required Skills

Data Analyst