PKI Engineer

Motion Recruitment; Irving (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Motion Recruitment is seeking a fully onsite PKI Engineer for a 12-month contract in Irving, TX. The ideal candidate will handle PKI, certificate lifecycle, and automation across enterprise platforms.

Responsibilities include managing PKI infrastructure, issuing/renewing certificates, enforcing security controls, and integrating automation with Venafi, Keyfactor, DigiCert, and ACME via scripting tools such as PowerShell.

Qualifications

• Bachelor’s degree in IT, CS, Cybersecurity, or related field or equivalent experience.
• Security certifications (CISSP, GSEC or equivalent) and Microsoft security/identity certifications preferred.
• Experience with Azure, AWS, or GCP certificate management services.
• Knowledge of Zero Trust and modern authentication technologies.
• 3–5 years PKI engineering or information security experience.
• Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Strong PKI concepts: certificate lifecycle, SSL/TLS, X.509, cryptography.
• Experience with certificate enrollment, issuance, renewal, revocation, validation.
• Knowledge of HSMs and cryptographic key management.
• PowerShell or other automation/scripting experience.
• Strong troubleshooting, analytical, and documentation skills.

Responsibilities

• Manage and maintain enterprise PKI platforms including CAs, RAs, HSMs, OCSP responders, and enrollment services.
• Issue, renew, revoke, and replace certificates for users, devices, servers, apps, cloud services, and network devices.
• Implement PKI security controls, policies, and cryptographic standards.
• Design and support automated certificate management using AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting.
• Manage cryptographic keys generation, storage, rotation, escrow, destruction.
• Diagnose and resolve certificate-related issues across apps, websites, VPNs, auth systems.
• Develop PKI architecture diagrams, procedures, and governance documentation.
• Participate in security assessments, incident investigations, vulnerability remediation, modernization efforts.

Skills

PKI engineering

Certificate lifecycle management

AD CS

SSL/TLS/X.509

HSMs / key management

Cloud certificate management

Zero Trust

PowerShell / scripting

Troubleshooting

Documentation

Education

Bachelor’s degree in IT/CS/Cybersecurity or related field

Tools

Microsoft AD CS

Venafi

Keyfactor

DigiCert

ACME protocols

Job description

Our client is seeking a fully onsite PKI Engineer for a 12 month contract in Irving, TX. No C2C!

Required

• Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience).
• Security , CISSP, GSEC, or equivalent security certifications.
• Microsoft security or identity certifications preferred.
• Experience with Azure, AWS, or Google Cloud Platform certificate management services.
• Knowledge of Zero Trust principles and modern authentication technologies.
• 3-5 years of PKI engineering, information security, or infrastructure security experience.
• Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles.
• Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
• Knowledge of HSMs and cryptographic key management.
• Strong troubleshooting, analytical, and documentation skills.
• Experience with PowerShell or other automation/scripting technologies.

Day to Day

• PKI Infrastructure Administration: Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), HSMs, OCSP responders, and certificate enrollment services.
• Certificate Lifecycle Management: Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances.
• PKI Security & Compliance: Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards.
• Certificate Automation & Integration: Design and support automated certificate management solutions using Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies.
• Cryptographic Key Management: Manage cryptographic key generation, storage, rotation escrow, and destruction processes.
• Troubleshooting & Support: Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems.
• PKI Standards & Documentation: Develop and maintain PKI architecture diagrams, procedures, technical documentation, and governance standards.
• Security Operations & Continuous Improvement: Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts.