PKI / Certificate Management Engineer

Key Responsibilities:

• Design and implement enterprise PKI, managing certificate lifecycle from issuance to retirement.
• Automate certificate enrollment and renewal using ACME and other tools.
• Manage certificates across Windows, Linux, cloud, containers, and network devices.

Integrations and Security:

• Integrate with AWS Private CA, ACM, and CloudHSM.
• Support Federal/DoD PKI, CAC/PIV, and mTLS for Zero Trust.
• Ensure FIPS-validated cryptography and HSM operations.

Monitoring and Governance:

• Implement certificate discovery, monitoring, and alerting.
• Develop governance standards for issuance, key length, and renewal.
• Troubleshoot complex certificate-chain and TLS issues.