PKI Engineer

Bill Rate-$70

Location: Denver, Co. 3 days onsite (Hybrid).

Duration: 6 months

Role Descriptions: Manage end-to-end SSLTLS certificate lifecycle including issuance| renewal| revocation| and automation.Administer Public Key Infrastructure (PKI) platforms such as Microsoft CA| DigiCert| Venafi| Entrust| or Sectigo.Manage Enterprise Key Management (EKM)| encryption keys| HSMs (Hardware Security Modules)| and key rotation processes.Implement certificate discovery| monitoring| and expiration alerting.Support cloud-based key management services (Azure Key Vault| AWS KMS| Google Cloud KMS).Ensure compliance with security standards and regulatory requirements.Troubleshoot certificate-related issues impacting applications| servers| APIs| and network devices.Automate certificate and key management processes using PowerShell| Python| or REST APIs.Collaborate with Security| Infrastructure| Application| and DevOps teams.

Essential Skills: Role Requirements5 years of experience in Certificate Management and PKI administration.Strong understanding of oPKI architectureoSSLTLS protocolsoX.509 certificatesoCertificate Signing Requests (CSR)oCertificate Authorities (CA)Hands-on experience with oVenafi| DigiCert| Entrust| Sectigo| or Microsoft PKIoAzure Key Vault| AWS KMS| or equivalent EKM solutionsoHSM technologies (Thales| SafeNet| Luna HSM)Experience managing certificate lifecycle automation.Knowledge of cryptographic algorithms (RSA| ECC| AES| SHA-256).Scripting experience in PowerShell| Python| or Bash.PreferredExperience in hybrid cloud environments (Azure| AWS| Eligible to workP).Knowledge of DevSecOps and CICD integration.Experience with Kubernetes secrets and certificate management.Security certifications such as oCISSPoSecurityoAzure Security Engineer (AZ-500)oCertified PKI Professional

Disclaimer: Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination, based solely on their qualifications, ability, competence and performance. This email and its attachments may contain confidential or proprietary information and is intended only for the recipient(s). If you received this message in error, please disregard it and notify the sender. If you no longer wish to receive our communications, you may unsubscribe at any time.

Security Notice: Our official website is www.diverselynx.com We do not operate or authorize any other websites representing Diverse Lynx LLC.