PKI & Certificate Lifecycle Engineer — Onsite

Voto Consulting LLC; Irving (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Voto Consulting LLC in Irving, TX is seeking an experienced PKI / Certificate Lifecycle Management Engineer to manage enterprise PKI services and certificate workflows. You will administer AD CS, manage issuing/offline root CAs, automate lifecycle tasks with PowerShell and REST, and coordinate with security, cloud, and operations teams to prevent outages.

If you bring 3+ years in PKI, strong knowledge of X.509, TLS/mTLS, and experience with DigiCert or Sectigo, you will help sustain trusted

Qualifications

• 3+ years of hands-on Enterprise PKI and Certificate Management.
• Experience administering Microsoft AD CS environments.
• Experience with Offline Root CA and Issuing CA operations.
• Hands-on experience managing public TLS certificates through providers such as DigiCert or Sectigo.
• Strong understanding of: X.509 Certificates, Certificate Chains, CRL and OCSP, CSRs and SANs, Trust Stores.
• Experience with Active Directory, Group Policy, Windows Server, and Auto-Enrollment.
• Strong PowerShell scripting and automation experience.
• Hands-on experience using OpenSSL for certificate creation, conversion, and troubleshooting.
• Ability to troubleshoot certificate trust, TLS, and mTLS issues across enterprise environments.

Responsibilities

• Administer and support Microsoft AD CS.
• Manage enterprise issuing CAs and offline root CAs.
• Maintain certificate templates, enrollment permissions, and auto-enrollment configurations.
• Support CRL, AIA, and OCSP services.
• Perform CA maintenance, upgrades, backups, recovery testing, and monitoring.
• Manage the lifecycle of internal and public certificates including issuance, renewal, revocation, and retirement.
• Coordinate certificate deployments with application, server, network, and cloud teams.
• Develop and maintain automation using PowerShell, REST APIs, and ACME-based workflows.
• Integrate certificate management workflows with ServiceNow, CMDB, monitoring, and security platforms.
• Maintain reusable scripts, technical documentation, and operational procedures.
• Troubleshoot PKI, certificate chain, and trust-related issues.
• Diagnose TLS/mTLS handshake failures and certificate validation problems.
• Use OpenSSL, certutil, PowerShell, logs, and traces to identify root causes.
• Support investigations involving certificate outages, renewals, and security incidents.

Skills

PKI

AD CS

PowerShell

OpenSSL

TLS certificates

Certificate lifecycle

Automation

REST APIs

Azure PKI

Tools

DigiCert

Sectigo

Venafi

Keyfactor

ACME

Job description

Voto Consulting LLC in Irving, TX is seeking an experienced PKI / Certificate Lifecycle Management Engineer to manage enterprise PKI services and certificate workflows. You will administer AD CS, manage issuing/offline root CAs, automate lifecycle tasks with PowerShell and REST, and coordinate with security, cloud, and operations teams to prevent outages.

If you bring 3+ years in PKI, strong knowledge of X.509, TLS/mTLS, and experience with DigiCert or Sectigo, you will help sustain trusted