PKI Engineer

Motion Recruitment; Irving (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Motion Recruitment is seeking a fully onsite PKI Engineer for a 12+ month contract in Irving, TX. You will manage enterprise PKI platforms, CAs, RAs, HSMs, and certificate enrollment services.

The role requires 3–5 years PKI or information security experience, AD CS management, and strong knowledge of PKI concepts, SSL/TLS, and cryptographic principles. Security certifications and PowerShell scripting are valued.

Qualifications

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience).
• Security+, CISSP, GSEC, or equivalent security certifications.
• Microsoft security or identity certifications preferred.
• Experience with Azure, AWS, or GCP certificate management services.
• Knowledge of Zero Trust principles and modern authentication technologies.
• 3-5 years of PKI engineering, information security, or infrastructure security experience.
• Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles.
• Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
• Knowledge of HSMs and cryptographic key management.
• Strong troubleshooting, analytical, and documentation skills.
• Experience with PowerShell or other automation/scripting technologies.

Responsibilities

• PKI Infrastructure Administration: Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), HSMs, OCSP responders, and certificate enrollment services.
• Certificate Lifecycle Management: Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances.
• PKI Security & Compliance: Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards.
• Certificate Automation & Integration: Design and support automated certificate management solutions using Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies.
• Cryptographic Key Management: Manage cryptographic key generation, storage, rotation, escrow, and destruction processes.
• Troubleshooting & Support: Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems.
• PKI Standards & Documentation: Develop and maintain PKI architecture diagrams, procedures, technical documentation, and governance standards.
• Security Operations & Continuous Improvement: Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts.

Skills

PKI engineering

Zero Trust concepts

PowerShell scripting

Documentation

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

AD CS

Venafi

Keyfactor

DigiCert

HSMs

Job description

Our client is seeking a fully onsite PKI Engineer for a 12+ month contract in Irving, TX. No C2C!

Required

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience).
• Security+, CISSP, GSEC, or equivalent security certifications.
• Microsoft security or identity certifications preferred.
• Experience with Azure, AWS, or GCP certificate management services.
• Knowledge of Zero Trust principles and modern authentication technologies.
• 3-5 years of PKI engineering, information security, or infrastructure security experience.
• Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles.
• Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
• Knowledge of HSMs and cryptographic key management.
• Strong troubleshooting, analytical, and documentation skills.
• Experience with PowerShell or other automation/scripting technologies.

Day to Day

• PKI Infrastructure Administration: Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), HSMs, OCSP responders, and certificate enrollment services.
• Certificate Lifecycle Management: Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances.
• PKI Security & Compliance: Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards.
• Certificate Automation & Integration: Design and support automated certificate management solutions using Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies.
• Cryptographic Key Management: Manage cryptographic key generation, storage, rotation, escrow, and destruction processes.
• Troubleshooting & Support: Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems.
• PKI Standards & Documentation: Develop and maintain PKI architecture diagrams, procedures, technical documentation, and governance standards.
• Security Operations & Continuous Improvement: Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts.

Posted By: Jamie Prater