Senior PKI Engineer — Remote, High-Impact Crypto Ops

Blackbaud; Charleston (SC); Hybrid; USD 102,000 - 133,000; Full time

Benefits offered by this job

Remote-friendly

401(k) matching

Tuition reimbursement

Job summary

Blackbaud is seeking a Sr PKI Engineer to operate and maintain our PKI and certificate management services within a Microsoft AD CS environment. You will drive automation, manage certificate lifecycles, and integrate with Venafi, Keyfactor, and Fortanix DSM across enterprise systems.

You will ensure secure, available PKI services, perform health checks, manage renewals, and maintain runbooks and documentation.

Qualifications

• Strong hands-on experience operating Microsoft AD CS in an enterprise environment, including NDES.
• Experience administering Venafi Trust Protection Platform or Keyfactor Command.
• Working knowledge of Fortanix Data Security Manager or comparable HSM solutions and PKI usage.
• Strong understanding of X.509 certificates, certificate chains, enrollment, revocation, TLS, and private key protection.
• PowerShell scripting and troubleshooting skills.

Responsibilities

• Administer and maintain Microsoft Active Directory Certificate Services (AD CS), including issuing CAs, certificate templates, enrollment services (including autoenrollment), NDES, and CRL publication.
• Operate certificate lifecycle platform (Venafi/Keyfactor); monitor inventory, process requests, support renewals, troubleshoot integrations.
• Work with HSM-backed services (Fortanix DSM) to resolve access, connectivity, and key usage issues.
• Investigate and resolve certificate issuance, renewal, trust chain, revocation, NDES enrollment, and key access issues.
• Perform routine PKI health checks, patching, maintenance, backups, and recovery testing.
• Respond to certificate expiration alerts and coordinate renewals with owners.
• Maintain PowerShell scripts, scheduled tasks, reports, and PKI automation.
• Maintain CLM/CLaaS infrastructure and documentation; support audits and incident response.

Skills

AD CS

Venafi TPP

Keyfactor Command

HSM platforms

PowerShell

TLS / X.509

DNS & Networking

Azure/AWS cryptography

Tools

Venafi Trust Protection Platform

Keyfactor Command

Fortanix DSM

Job description

Blackbaud is seeking a Sr PKI Engineer to operate and maintain our PKI and certificate management services within a Microsoft AD CS environment. You will drive automation, manage certificate lifecycles, and integrate with Venafi, Keyfactor, and Fortanix DSM across enterprise systems.

You will ensure secure, available PKI services, perform health checks, manage renewals, and maintain runbooks and documentation.