Senior PKI Engineer – Remote, AD CS & HSM Specialist

Blackbaud; United States; Hybrid; USD 102,000 - 133,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Remote-flexible workforce

Wellness Programs

401(k) program with employer match

Flexible paid time off

Generous Parental Leave

Donations for Doers

Pet insurance, legal and identity保护

Tuition reimbursement program

Job summary

Blackbaud seeks a senior PKI engineer to administer AD CS, NDES, and certificate lifecycle across an enterprise. You will manage Venafi or Keyfactor-powered PKI platforms, monitor inventory, support renewals, and troubleshoot integrations with Azure or AWS.

Strong PowerShell skills and deep TLS/X.509 knowledge are required. You will collaborate with networking, cloud, and application teams to ensure secure key usage, perform health checks, and maintain runbooks and documentation for audits and

Qualifications

• Strong hands-on experience operating Microsoft AD CS in an enterprise environment.
• Experience administering Venafi Trust Protection Platform or Keyfactor Command.
• Knowledge of Fortanix DSM or similar HSM solutions and PKI key management.

Responsibilities

• Administer and maintain AD CS including CAs, templates, enrollment, NDES, and CRL publication.
• Operate PKI platform like Venafi or Keyfactor; monitor inventory and support renewals.
• Perform PKI health checks, patching, backups, and recovery testing; respond to expiration alerts.

Skills

PKI management

PowerShell scripting

AD CS administration

TLS/X.509

Cross-functional collaboration

Tools

Venafi Trust Protection Platform

Keyfactor Command

Fortanix Data Security Manager

HSM solutions

PKI tooling and automation

Job description

Blackbaud seeks a senior PKI engineer to administer AD CS, NDES, and certificate lifecycle across an enterprise. You will manage Venafi or Keyfactor-powered PKI platforms, monitor inventory, support renewals, and troubleshoot integrations with Azure or AWS.

Strong PowerShell skills and deep TLS/X.509 knowledge are required. You will collaborate with networking, cloud, and application teams to ensure secure key usage, perform health checks, and maintain runbooks and documentation for audits and