Senior PKI & Secure Windows Endpoint Engineer (Remote)

IT Labs; United States; Remote; USD 130,000 - 180,000; Full time

Benefits offered by this job

PTO included

Remote within US

Job summary

IT Labs is seeking a Senior PKI Engineer to integrate and manage machine certificate authentication across Windows endpoints, Microsoft Intune, and Palo Alto GlobalProtect/Prisma Access in a U.S. based environment.

The role emphasizes secure certificate lifecycle management, pre-login device authentication, and seamless transition from device identity to user identity, with strong PKI expertise and enterprise Windows experience.

Qualifications

• Strong hands-on experience with Public Key Infrastructure (PKI) in enterprise environments.
• Strong knowledge of Microsoft AD CS / Certificate Services or comparable PKI solutions.
• Experience with Windows enterprise environments.
• Experience with Active Directory.
• Experience with Microsoft Intune or another enterprise endpoint management platform.
• Strong troubleshooting skills across certificates, authentication, endpoint configuration, and network connectivity.

Responsibilities

• Implement and support machine certificate-based authentication for Windows endpoints.
• Integrate an existing enterprise PKI with Palo Alto GlobalProtect Pre-Logon.
• Support device authentication before Windows user login.
• Configure and troubleshoot certificate enrollment, renewal, expiration, and revocation.
• Work with Microsoft Intune, Active Directory, and Windows endpoint management.
• Ensure certificates and private keys are securely stored, including TPM-backed key scenarios.
• Support CRL and OCSP validation and certificate revocation processes.
• Configure and troubleshoot GlobalProtect certificate authentication and pre-logon connectivity.
• Support the transition from machine/device identity to authenticated user identity.
• Collaborate with network and security teams on Prisma Access, firewall policies, and secure endpoint connectivity.
• Troubleshoot certificate, authentication, and connectivity issues across endpoints.
• Support resilience and failover across GlobalProtect / Prisma Access gateways.
• Document configurations, processes, and troubleshooting procedures.
• Collaborate with endpoint, networking, identity, and security teams.

Tools

AD CS / Certificate Services

Palo Alto GlobalProtect

Prisma Access

GlobalProtect Pre-Logon

TPM‑backed certificates

Job description

IT Labs is seeking a Senior PKI Engineer to integrate and manage machine certificate authentication across Windows endpoints, Microsoft Intune, and Palo Alto GlobalProtect/Prisma Access in a U.S. based environment.

The role emphasizes secure certificate lifecycle management, pre-login device authentication, and seamless transition from device identity to user identity, with strong PKI expertise and enterprise Windows experience.