PKI Engineer

KellyMitchell Group; Spring (TX); On-site; USD 80,000 - 95,000; Full time

Benefits offered by this job

Medical, Dental, & Vision Insurance Plans

Employee-Owned Profit Sharing (ESOP)

401(k) offered

Job summary

KellyMitchell Group is looking for a PKI Engineer to join their team in Spring, Texas. This on-site position involves designing, implementing, and managing secure identity and access management solutions. Ideal candidates are experienced with Active Directory, PKI certificates, and Infrastructure as Code tools like Terraform.

The role involves responsibilities such as managing Active Directory services, developing PowerShell scripts, and ensuring security best practices. The position offers a competitive salary and comprehensive benefits.

Qualifications

• Legacy Active Directory experience required, excluding cloud-based.
• Hands-on experience with PKI certificates is necessary.
• Proven expertise in Identity & Access Management in enterprise settings.
• Proficient in PowerShell scripting and automation required.
• Experience with Terraform or similar Infrastructure as Code tools.

Responsibilities

• Manage and maintain Active Directory services, including certification and domain services.
• Design, implement, and manage PKI certificates.
• Develop PowerShell scripts for operational efficiency.
• Implement Infrastructure as Code using Terraform.
• Troubleshoot IAM issues and collaborate on solutions.
• Participate in IAM strategy planning and security assessments.

Skills

Legacy Active Directory experience

PKI certificate experience

Identity & Access Management experience

Domain services expertise

PowerShell scripting and automation

Infrastructure as Code (Terraform)

Problem-solving skills

Security best practices knowledge

Job description

Job Summary

Our client is seeking a PKI Engineer to join their team. In this role, you will be responsible for designing, implementing, and managing secure identity and access management solutions across the organization. The ideal candidate is experienced in Active Directory, PKI certificates, automation using PowerShell, and Infrastructure as Code (Terraform). This is an on‑site position that requires hands‑on expertise in IAM systems and security best practices.

Core Responsibilities

• Manage and maintain Active Directory services, including federation, certification services, and domain services
• Design, implement, and manage PKI certificates to ensure secure communication and authentication
• Develop and maintain PowerShell scripts for automation, reporting, and operational efficiency
• Implement Infrastructure as Code using Terraform to support IAM infrastructure provisioning and management
• Troubleshoot IAM‑related issues and collaborate with cross‑functional teams to implement security solutions
• Participate in IAM strategy planning, security assessments, and continuous improvement initiatives
• Stay up to date with the latest IAM tools, techniques, and best practices

Required Skills / Experience (Must‑Haves)

• Legacy Active Directory experience, not cloud‑based Active Directory
• PKI certificate experience
• Proven experience in Identity & Access Management in enterprise environments
• Domain services expertise
• Proficiency in PowerShell scripting and automation
• Hands‑on experience with Terraform or similar Infrastructure as Code tools
• Excellent problem‑solving skills and the ability to work independently as well as part of a team
• Strong understanding of security best practices, authentication, and access control

Preferred Skills / Experience (Nice‑to‑Haves)

• Experience with DataDog monitoring and alerting for IAM systems
• Familiarity with newer tools such as BloodHound and KeyFactor for enhanced security and certificate management

Key Competencies & Behaviors

• Ownership & Accountability
• Problem‑Solving & Analytical Thinking
• Collaboration & Communication

Work Environment

Location: Spring, Texas (on‑site required)

Duration: 12 months

Compensation & Benefits

• Pay Range: Approximately $80,000 – $95,000
• Medical, Dental, & Vision Insurance Plans
• Employee‑Owned Profit Sharing (ESOP)
• 401(k) offered
• We comply with local wage minimums