Remote PKI Architect - Crypto Security & Design

Infinite Ranges, Inc.; United States; Remote; USD 90,000 - 150,000; Part time

Job summary

Infinite Ranges seeks a PKI Architect with strong cryptography and PKI management experience to lead strategy, design, and deployment of scalable PKI infrastructures in a remote consulting capacity.

The role focuses on root/intermediate CAs, certificate lifecycle automation, and security risk management, collaborating with security and DevOps teams to ensure best practices and robust PKI governance.

Qualifications

• Demonstrable expertise in cryptography, certificate management, and networking protocols.
• Hands-on experience with PKI technologies and standards such as X.509, OCSP, and CRL.
• Strong scripting skills, preferably in Python or Shell, for automation.
• Knowledge of IT and Cybersecurity frameworks, such as NIST, FIPS, CSF, CIS, ISO 27001/2.
• Working knowledge of Cloud provider security architecture design patterns, and key control methods - Bring your own key, Hold your own key, partitioned HSMs.
• Experience with OWASP Web/API vulnerabilities and compensating controls (CSRF, XSS, SQLI, etc.)

Responsibilities

• Develop a holistic PKI strategy aligned with organizational security objectives.
• Design end-to-end PKI architecture encompassing root and intermediate certificate authorities, end-entity lifecycle management, and policy frameworks.
• Take the lead in deploying PKI infrastructure that’s scalable and integrated with existing systems.
• Configure and manage certificate authorities to establish trust within and outside the organization.
• Formulate and implement procedures for certificate issuance, renewal, and revocation.
• Use automation tools for certificate lifecycle management and to ensure compliance with best practices.
• Regularly conduct security assessments of the PKI setup and contribute to incident response plans.
• Maintain comprehensive and up-to-date technical documentation for PKI configurations, procedures, and policies.
• Collaborate with network, security, and DevOps teams for secure PKI integration.

Skills

Cryptography

Certificate management

Networking protocols

Python/Shell scripting

Cloud security design

Security frameworks

HSM concepts

OWASP knowledge

Tools

Sectigo

Keyfactor

AppviewX

Microsoft PKI

Thales HSM

OCSP

Job description

Infinite Ranges seeks a PKI Architect with strong cryptography and PKI management experience to lead strategy, design, and deployment of scalable PKI infrastructures in a remote consulting capacity.

The role focuses on root/intermediate CAs, certificate lifecycle automation, and security risk management, collaborating with security and DevOps teams to ensure best practices and robust PKI governance.