PKI Engineer

Resolve Tech Solutions Inc; Irving (TX); On-site; USD 95,000 - 140,000; Full time

Job summary

Resolve Tech Solutions Inc. is seeking a PKI Engineer to manage enterprise PKI platforms, CAs, RAs, HSMs, and certificate enrollment services in Irving, TX. The role includes lifecycle management and security/compliance duties.

You will implement automated certificate management using AD CS, Venafi, Keyfactor, and scripting, while collaborating with security teams on ongoing improvements and incident response. Occasional after-hours support may be required.

Qualifications

• 3-5 years of PKI engineering, information security, or infrastructure security experience.
• Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles.
• Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
• Knowledge of HSMs and cryptographic key management.
• Strong troubleshooting, analytical, and documentation skills.
• Experience with PowerShell or other automation/scripting technologies.

Responsibilities

• PKI Infrastructure Administration: Manage and maintain enterprise PKI platforms, including CAs, RAs, HSMs, OCSP responders, and certificate enrollment services.
• Certificate Lifecycle Management: Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances.
• PKI Security & Compliance: Implement and enforce PKI security controls, certificate policies, and cryptographic standards.
• Certificate Automation & Integration: Design and support automated certificate management solutions using AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies.
• Cryptographic Key Management: Manage cryptographic key generation, storage, rotation, escrow, and destruction processes.
• Troubleshooting & Support: Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems.
• PKI Standards & Documentation: Develop PKI architecture diagrams, procedures, technical documentation, and governance standards.
• Security Operations & Continuous Improvement: Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts.

Skills

PKI engineering

Troubleshooting

Documentation

Automation scripting

PowerShell

Tools

PowerShell

Job description

• PKI Infrastructure Administration: Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), HSMs, OCSP responders, and certificate enrollment services.
• Certificate Lifecycle Management: Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances.
• PKI Security & Compliance: Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards.
• Certificate Automation & Integration: Design and support automated certificate management solutions using Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies.
• Cryptographic Key Management: Manage cryptographic key generation, storage, rotation, escrow, and destruction processes.
• Troubleshooting & Support: Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems.
• PKI Standards & Documentation: Develop and maintain PKI architecture diagrams, procedures, technical documentation, and governance standards.
• Security Operations & Continuous Improvement: Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts.
• Full-time, on-site position based in Irving, TX.
• Occasional after-hours support may be required.
• Participation in certificate renewals, maintenance windows, and emergency security response activities when necessary.

Years of Experience

• 3-5 years of PKI engineering, information security, or infrastructure security experience.

Required Qualifications (Non-Negotiable)

• Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles.
• Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
• Knowledge of HSMs and cryptographic key management.
• Strong troubleshooting, analytical, and documentation skills.
• Experience with PowerShell or other automation/scripting technologies.