Remote PKI Engineer

Insight Global; United States; On-site; USD 96,000 - 103,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

HSAs, FSAs, and DCFSA options

401k retirement account with employer‑

Paid sick leave and/or other paid time

Job summary

Insight Global is seeking a hands-on PKI Engineer to design, deploy, and modernize an enterprise Public Key Infrastructure. The role collaborates with architects, project management, and infrastructure teams to implement certificate lifecycle solutions across a large enterprise, focusing on X.509, CA management, and PKI automation.

The ideal candidate has strong hands-on experience with digital certificates, certificate authorities, and platform-based certificate management.

Qualifications

• Strong experience with X.509 certificates and certificate lifecycle management.
• Experience managing Certificate Authorities (CA), including Microsoft AD CS.
• Experience with enterprise certificate management platforms such as Venafi or CyberArk Certificate Manager.
• Plus: PKI migrations or modernization projects.
• Background in highly regulated environments (e.g., healthcare) is a plus.

Responsibilities

• Design, deploy, and support enterprise PKI solutions.
• Manage X.509 certificates throughout the certificate lifecycle.
• Support and manage Certificate Authorities (CA) and Microsoft AD CS environments.
• Implement and configure enterprise certificate management solutions.
• Support PKI migration and modernization initiatives.
• Troubleshoot certificate, authentication, and PKI-related issues.
• Partner with architects and technical teams to ensure secure and scalable PKI solutions.

Skills

X.509 certificates

Certificate lifecycle management

Certificate Authorities (CA)

Microsoft AD CS

PKI automation

Tools

Venafi

CyberArk Certificate Manager

AD CS (Active Directory Certificate Services)

HSMs

Job description

Compensation: $70 - $75hr (depending on years of experience)

Interview process: One round virtual interview

Must haves

• Strong experience with X.509 certificates and certificate lifecycle management
• Experience managing Certificate Authorities (CA), including Microsoft AD CS
• Experience with enterprise certificate management platforms such as Venafi or CyberArk Certificate Manager

Pluses

• Experience with HSMs (Hardware Security Modules)
• Experience with PKI migrations or modernization projects
• Background supporting PKI in large healthcare or other highly regulated enterprise environments
• Knowledge of security and certificate standards such as NIST, FIPS, and CA/B Forum
• Experience with certificate automation, discovery, renewal, and compliance

We are seeking a hands-on PKI Engineer to support the design, deployment, and modernization of an enterprise Public Key Infrastructure environment. This individual will work closely with architects, project management, and infrastructure teams to implement and manage certificate lifecycle solutions across a large enterprise environment. The ideal candidate has previously helped design or implement an enterprise PKI solution and has strong hands-on experience with digital certificates, Certificate Authorities, and certificate lifecycle management platforms.

Key Responsibilities

• Design, deploy, and support enterprise PKI solutions
• Manage X.509 certificates throughout the certificate lifecycle
• Support and manage Certificate Authorities (CA) and Microsoft AD CS environments
• Implement and configure enterprise certificate management solutions
• Support PKI migration and modernization initiatives
• Troubleshoot certificate, authentication, and PKI-related issues
• Partner with architects and technical teams to ensure secure and scalable PKI solutions
• Maintain certificate management practices aligned with enterprise security and compliance requirements

Compensation

$70 to $75

Exact compensation may vary based on several factors, including skills, experience, and education.

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.