PKI Automation Engineer

NexTech Solutions; Memphis (TN); On-site; USD 95,000 - 135,000; Full time

Job summary

NexTech Solutions is seeking an experienced PKI Automation Engineer to modernize and automate certificate management within a secure enterprise PKI environment. You will design and maintain automation across Windows and Linux platforms, integrating with CI/CD pipelines and enterprise systems.

The role emphasizes hands-on scripting in PowerShell and Python, plus experience with Ansible, ADCS, and IaC practices to improve operational efficiency and reduce manual certificate handling.

Qualifications

• 3+ years of professional experience in infrastructure, automation, or PKI engineering.
• Hands-on Ansible automation including playbooks, roles, and workflow development.
• Strong PKI knowledge including CA, TLS/SSL, key management, and ADCS administration.
• Advanced PowerShell scripting skills; Python for automation preferred.
• Experience with automation frameworks and IaC principles; CI/CD integration.

Responsibilities

• Design, develop, and maintain Ansible playbooks, roles, and automation workflows.
• Automate certificate issuance, deployment, renewal, validation, compliance, and reporting processes.
• Build IaC solutions to support enterprise PKI operations.
• Develop reusable automation tools using PowerShell and Python.
• Administer and automate ADCS and certificate templates.

Skills

Ansible automation

PowerShell

Python

PKI knowledge

ADCS

CI/CD integration

Education

Bachelor's degree in Computer Science or related field

Tools

Jenkins

GitHub Actions

AAP (Ansible Automation Platform)

Terraform

Job description

We are seeking an experienced PKI Automation Engineer to help modernize and automate enterprise certificate management. This role is ideal for an automation-focused engineer who enjoys building scalable, repeatable solutions that eliminate manual processes and improve operational efficiency.

You will design, develop, and maintain automation for certificate lifecycle management while supporting a secure enterprise PKI environment. Success in this role requires strong automation expertise, solid knowledge of Public Key Infrastructure (PKI), and the ability to integrate certificate management across a variety of enterprise platforms.

Key Responsibilities

• Design, develop, and maintain Ansible playbooks, roles, and automation workflows
• Automate certificate issuance, deployment, renewal, validation, compliance, and reporting processes
• Build Infrastructure as Code (IaC) solutions to support enterprise PKI operations
• Develop reusable automation tools using PowerShell and Python
• Administer and automate Microsoft Active Directory Certificate Services (ADCS)
• Manage certificate templates, enrollment workflows, and security controls
• Support enterprise PKI environments and certificate lifecycle management
• Integrate PKI automation with Windows, Linux, web applications, load balancers, and CI/CD pipelines
• Improve operational efficiency by reducing manual certificate management activities
• Collaborate with cross-functional technology teams to implement secure, scalable automation solutions

Required Qualifications

• 3+ years of professional experience in infrastructure, automation, or PKI engineering
• Strong hands-on experience with Ansible automation, including playbooks, roles, and workflow development
• Strong understanding of Public Key Infrastructure (PKI), including:
• Certificate Authorities (CA)
• Certificate templates
• TLS/SSL
• Key management
• Experience administering Microsoft Active Directory Certificate Services (ADCS)
• Advanced PowerShell scripting skills
• Experience with Python for automation is preferred
• Experience developing reusable automation frameworks and operational tooling
• Familiarity with Infrastructure as Code principles and automation best practices
• Experience integrating automation with enterprise platforms and CI/CD pipelines
• Experience with automation platforms such as Ansible Automation Platform (AAP), Jenkins, GitHub Actions, or similar technologies

Preferred Qualifications

• Experience with certificate lifecycle management platforms such as AppViewX or similar solutions
• Knowledge of enterprise security and compliance best practices related to certificate management

How to Apply

If you have a passion for automation, infrastructure engineering, and enterprise security, we would love to hear from you. Please submit your resume for confidential consideration. Qualified candidates whose experience closely aligns with the requirements will be contacted to discuss the opportunity in more detail.