PKI Certificate Infrastructure Engineer

Centraprise; Phoenix (AZ); On-site; USD 110,000 - 170,000; Full time

Job summary

Centraprise Corp. is seeking a PKI/security engineer with strong hands-on experience in enterprise certificate management. The role covers CA administration, certificate lifecycle, and robust cryptographic operations.

Candidates should understand TLS/SSL, CSRs, trust stores, CRL/OCSP, and have hands-on experience with HSMs and AD CS. Proficiency in scripting (PowerShell, Python, Bash) and Windows/Linux environments is required.

Qualifications

• Strong hands-on experience with Public Key Infrastructure (PKI) and enterprise certificate management.
• Experience administering Certificate Authorities (CA) and certificate lifecycle processes.
• Strong understanding of public/private key cryptography, TLS/SSL, CSRs, certificate chains and trust stores.

Skills

PKI

Certificate management

Certificate Authorities

TLS/SSL

CSRs

Key management

HSMs

AD CS

SCEP/EST/ACME

Troubleshooting cryptographic issues

PowerShell/Python/Bash

Windows and Linux

Security controls for key protection

Tools

AD CS

HSMs

SCEP/EST/ACME

Job description

• Strong hands-on experience with Public Key Infrastructure (PKI) and enterprise certificate management.
• Experience administering Certificate Authorities (CA) and certificate lifecycle processes.
• Strong understanding of:
• Public/private key cryptography
• TLS/SSL
• Certificate signing requests (CSRs)
• Certificate chains and trust stores
• CRL and OCSP
• Encryption and digital signatures
• Hands-on experience with Hardware Security Modules (HSMs) and cryptographic key management.
• Experience with Microsoft Active Directory Certificate Services (AD CS) or equivalent enterprise PKI platforms.
• Knowledge of certificate enrollment technologies such as SCEP, EST, ACME, or related protocols.
• Experience troubleshooting certificate, TLS, trust-chain, and cryptographic issues in enterprise environments.
• Scripting/automation experience using PowerShell, Python, Bash, or equivalent.
• Working knowledge of Windows and Linux environments.
• Understanding of security controls and industry practices related to key protection, certificate issuance, encryption, and cryptographic operations.