PKI Engineer

Bill Rate-$70
Location: Denver, Co. 3 days onsite (Hybrid).
Duration: 6 months

Role Descriptions: Manage end-to-end SSLTLS certificate lifecycle including issuance| renewal| revocation| and automation.Administer Public Key Infrastructure (PKI) platforms such as Microsoft CA| DigiCert| Venafi| Entrust| or Sectigo.Manage Enterprise Key Management (EKM)| encryption keys| HSMs (Hardware Security Modules)| and key rotation processes.Implement certificate discovery| monitoring| and expiration alerting.Support cloud-based key management services (Azure Key Vault| AWS KMS| Google Cloud KMS).Ensure compliance with security standards and regulatory requirements.Troubleshoot certificate-related issues impacting applications| servers| APIs| and network devices.Automate certificate and key management processes using PowerShell| Python| or REST APIs.Collaborate with Security| Infrastructure| Application| and DevOps teams.
Essential Skills: Role Requirements5 years of experience in Certificate Management and PKI administration.Strong understanding of oPKI architectureoSSLTLS protocolsoX.509 certificatesoCertificate Signing Requests (CSR)oCertificate Authorities (CA)Hands-on experience with oVenafi| DigiCert| Entrust| Sectigo| or Microsoft PKIoAzure Key Vault| AWS KMS| or equivalent EKM solutionsoHSM technologies (Thales| SafeNet| Luna HSM)Experience managing certificate lifecycle automation.Knowledge of cryptographic algorithms (RSA| ECC| AES| SHA-256).Scripting experience in PowerShell| Python| or Bash.PreferredExperience in hybrid cloud environments (Azure| AWS| Eligible to workP).Knowledge of DevSecOps and CICD integration.Experience with Kubernetes secrets and certificate management.Security certifications such as oCISSPoSecurityoAzure Security Engineer (AZ-500)oCertified PKI Professional