Job Description
PKI Engineer
Position Summary
We are seeking a skilled and motivated PKI Engineer to join our Infrastructure and Security team. This individual will be responsible for designing, administering, securing, and maintaining Public Key Infrastructure (PKI) environments. The role includes managing the lifecycle of digital certificates, certificate authorities, cryptographic services, and related security controls to ensure the confidentiality, integrity, and availability of enterprise systems and applications.
Key Responsibilities
We are seeking a skilled and motivated PKI Engineer to join our Infrastructure and Security team. This individual will be responsible for designing, administering, securing, and maintaining Public Key Infrastructure (PKI) environments. The role includes managing the lifecycle of digital certificates, certificate authorities, cryptographic services, and related security controls to ensure the confidentiality, integrity, and availability of enterprise systems and applications.
Key Responsibilities
- Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), Hardware Security Modules (HSMs), OCSP responders, and certificate enrollment services.
- Oversee certificate lifecycle management, including issuance, renewal, revocation, and replacement of digital certificates for users, devices, applications, servers, cloud services, and network infrastructure.
- Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards.
- Design, deploy, and support automated certificate management solutions using tools and technologies such as Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting/automation platforms.
- Manage cryptographic key generation, storage, rotation, escrow, and retirement processes.
- Troubleshoot and resolve certificate-related issues affecting applications, websites, VPNs, and authentication services.
- Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.
- Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.
- 3-5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security.
- Hands-on experience administering Microsoft Active Directory Certificate Services (AD CS) or similar enterprise PKI solutions.
- Strong understanding of PKI concepts, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles.
- Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
- Knowledge of Hardware Security Modules (HSMs) and cryptographic key management practices.
- Experience with PowerShell or other scripting and automation tools.
- Strong troubleshooting, analytical, and technical documentation skills.
- Experience with enterprise certificate management platforms such as Venafi, Keyfactor, or DigiCert.
- Familiarity with cloud-based certificate management services in Azure, AWS, or GCP.
- Knowledge of Zero Trust security principles and modern authentication technologies.
- Understanding of security compliance frameworks and risk management practices.
- Experience supporting large-scale enterprise infrastructure environments.
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience.
- Security certifications such as Security+, CISSP, GSEC, or equivalent preferred.
- Microsoft security, identity, or cloud certifications are a plus.
- Public Key Infrastructure (PKI) Administration
- Certificate Lifecycle Management
- Cryptography & Key Management
- SSL/TLS Security
- Certificate Automation & Governance
- Security Compliance & Risk Management
- Technical Documentation
- Incident Analysis & Troubleshooting
- PowerShell Scripting & Automation
- Ability to participate in planned maintenance windows, certificate renewals, and incident response activities as needed.
- Occasional after-hours support may be required.
- Experience working in complex enterprise environments is highly preferred.
Numbers & Facts
| Location | Irving, TX |
| Industry | Staffing/Employment Agencies |
| Company Size | 500 to 999 employees |
| Year Founded | 2006 |
About Company
The Intersect Group is a different and better business partner. We create unparalleled value for our clients by combining industry-leading Consulting capabilities with comprehensive Staffing and recruitment services. Clients trust us to deliver results based on our deep expertise and proven resources within finance, accounting, and information technology. Through our flexible delivery approach, you get the right solution, at the right time to accelerate your success and achieve all of your mission-critical objectives.
Skills
- Amazon Web Services (AWS)unmatched
- Analysis Skillsunmatched
- Authenticationunmatched
- Automationunmatched
- CISSP - Certified Information Systems Security Professionalunmatched
- Certificate Authoritiesunmatched
- Certificate Issuanceunmatched
- Cloud Computingunmatched
- CompTIA Security+unmatched
- Computer Scienceunmatched
- Computer Securityunmatched
- Cryptographyunmatched
- Digital Certificatesunmatched
- Documentationunmatched
- Enterprise Applicationsunmatched
- Escrowunmatched
- GCP (Good Clinical Practices)unmatched
- GSEC - GIAC Security Essentials Certificationunmatched
- Identify Issuesunmatched
- Incident Responseunmatched
- Information Technology & Information Systemsunmatched
- Information/Data Security (InfoSec)unmatched
- Infrastructure as a Service (IaaS)unmatched
- Internet Securityunmatched
- Maintain Complianceunmatched
- Microsoft Active Directoryunmatched
- Microsoft Certificationsunmatched
- Microsoft Product Familyunmatched
- Microsoft Windows Azureunmatched
- Network Administration/Managementunmatched
- Operations Processesunmatched
- Product Lifecycleunmatched
- Public Key Infrastructure (PKI)unmatched
- Risk Managementunmatched
- Risk Management Framework (RMF)unmatched
- SSL-TLS (Secure Socket Layer - Transport Layer Security)unmatched
- Scripting (Scripting Languages)unmatched
- Security Analysisunmatched
- Security Complianceunmatched
- Technical Drawingunmatched
- Technical Writingunmatched
- VPN (Virtual Private Network)unmatched
- Windows PowerShellunmatched
- X.509 Digital Certificateunmatched
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesFree resume builder
Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Free resume builder