PKI Specialist

We are seeking a seasoned PKI Certificate Management expert to join our team.

• Certificate Architecture and Deployment: Design, implement, and maintain secure and scalable PKI infrastructure, including root and subordinate CAs, CRLs, OCSP responders, and HSMs.
• Certificate Policy and Trust Models: Develop and enforce certificate policies, trust models, and key usage standards to ensure the security and integrity of digital certificates.
• PKI Upgrades and Migrations: Lead and execute PKI upgrades, migrations, and disaster recovery initiatives to ensure business continuity.
• Cross-Functional Collaboration: Collaborate with enterprise architects, security teams, and other stakeholders to align PKI with organizational security strategy.

• Digital Certificate Management: Manage the full lifecycle of digital certificates, including issuance, renewal, revocation, and expiration.
• Certificate Automation: Implement and maintain certificate management automation tools, such as Venafi, AppViewX, and Keyfactor.
• Integration and Monitoring: Integrate certificate management with CI/CD pipelines and cloud platforms, and monitor certificate health and compliance using automated dashboards and alerting systems.

• Security Audits and Compliance: Ensure PKI systems adhere to internal security policies and external standards, such as NIST and ISO 27001.
• Vulnerability Assessments: Conduct regular vulnerability assessments of PKI infrastructure to identify and remediate potential security threats.
• Documentation and Communication: Maintain comprehensive documentation for PKI architecture, processes, and procedures, and communicate effectively with stakeholders.

• Incident Response: Serve as the highest level of escalation for PKI-related incidents and provide timely resolution.
• Mentorship and Guidance: Provide mentorship and technical guidance to Level 1 and Level 2 support teams to ensure seamless support operations.
• Cross-Functional Collaboration: Collaborate with application and infrastructure teams to resolve certificate-related issues and improve overall system reliability.