Senior PKI Engineer - Remote, Enterprise Certificate Expert

Jobgether; United States; Remote; USD 102,000 - 133,000; Full time

Benefits offered by this job

Remote-friendly work

401(k) plan

Health insurance

Paid time off

Tuition reimbursement

Job summary

Jobgether is seeking a Sr. PKI Engineer based in the United States for a remote role to maintain and strengthen enterprise PKI, certificate management, and cryptographic services across a complex technology environment.

You will work with AD CS, Venafi or Keyfactor, Fortanix HSM, and cloud platforms (Azure, AWS) to ensure secure certificate lifecycles, automation, incident response, and continuous improvement of security tooling.

Qualifications

• Strong hands-on experience administering Microsoft AD CS in an enterprise environment.
• Experience with enterprise certificate lifecycle platforms (Venafi/Keyfactor).
• Knowledge of HSMs and cryptographic key management.
• Proficient in PowerShell scripting and automation.
• Understanding of TLS, X.509, and certificate trust chains.
• Familiarity with cloud PKI in Azure or AWS.

Responsibilities

• Operate and maintain AD CS and certificate services including templates and enrollment.
• Manage certificate lifecycles across platforms and coordinate renewals.
• Troubleshoot certificate issuance, revocation, and trust chain issues.
• Maintain PKI health checks, backups, and disaster recovery testing.
• Automate PKI tasks with PowerShell and reporting tools.
• Support cloud certificate services and integrations with CDNs, WAFs, and load balancers.

Skills

AD CS

Certificate Lifecycle Mgmt

HSM Knowledge

PowerShell

Cloud Security

TLS/X.509

Tools

Venafi

Keyfactor

Fortanix DSM

NDES

Azure

AWS

Job description

Jobgether is seeking a Sr. PKI Engineer based in the United States for a remote role to maintain and strengthen enterprise PKI, certificate management, and cryptographic services across a complex technology environment.

You will work with AD CS, Venafi or Keyfactor, Fortanix HSM, and cloud platforms (Azure, AWS) to ensure secure certificate lifecycles, automation, incident response, and continuous improvement of security tooling.