Senior PKI Engineer: AD CS, HSM, and CA Lifecycle

Largeton Group; Denver (CO); On-site; USD 120,000 - 150,000; Full time

Job summary

A financial institution seeks a Senior PKI Engineer to design, implement, and operate enterprise-grade PKI services. This role requires expertise in Microsoft Active Directory Certificate Services and Active Directory integration. The ideal candidate will also manage certificate lifecycle processes, lead key management practices, and ensure alignment with security standards. Strong PowerShell skills and experience with HSM for key management are essential, along with a solid understanding of certificate validation paths and risk assessments.

Qualifications

• 8+ years in Security Engineering/Identity Infrastructure.
• 5+ years with Microsoft AD CS managing CA infrastructure.
• Deep knowledge of X.509, CRL/OCSP, and key algorithms.

Responsibilities

• Design and maintain enterprise PKI architectures.
• Integrate PKI with Active Directory and Azure AD.
• Implement HSM-backed key storage for CAs.

Skills

Security Engineering

Microsoft AD CS

PowerShell

Windows Server Administration

Certificate Lifecycle Management

Tools

HSM

Intune

SCEP

Job description

A financial institution seeks a Senior PKI Engineer to design, implement, and operate enterprise-grade PKI services. This role requires expertise in Microsoft Active Directory Certificate Services and Active Directory integration. The ideal candidate will also manage certificate lifecycle processes, lead key management practices, and ensure alignment with security standards. Strong PowerShell skills and experience with HSM for key management are essential, along with a solid understanding of certificate validation paths and risk assessments.