PKI Administrator / Certificate management specialist - Remote
Job Description
Job Description
\n
Must Have Technical/Functional Skills
\n
\n
· Strong understanding of:
\n
· Public Key Infrastructure (PKI)
\n
· SSL/TLS Certificates
\n
· Certificate Signing Requests (CSR)
\n
· Certificate Revocation Lists (CRL)
\n
· OCSP
\n
· Encryption and Cryptographic Concepts
\n
\n
Roles & Responsibilities
\n
\n
· Manage the complete lifecycle of digital certificates, including enrollment, issuance, renewal, revocation, and expiration management.
\n
· Administer and support enterprise PKI environments and Certificate Authorities (CAs).
\n
· Monitor certificate health and proactively address expiring or non-compliant certificates.
\n
· Implement and manage certificate automation solutions to reduce operational overhead.
\n
· Ensure secure deployment of SSL/TLS certificates across servers, applications, network devices, APIs, and cloud environments.
\n
· Perform certificate inventory management and maintain accurate records of certificate ownership.
\n
· Troubleshoot certificate-related issues affecting applications, websites, and infrastructure services.
\n
· Support cryptographic key management processes and HSM integrations.
\n
· Enforce certificate and key management policies, standards, and procedures.
\n
· Coordinate with infrastructure, cloud, application, and security teams to ensure proper certificate deployment.
\n
· Support audits, regulatory requirements, and compliance initiatives.
\n
· Develop dashboards and reports to provide visibility into certificate health and compliance status.
\n
\n
Strong understanding of:
\n
· Public Key Infrastructure (PKI)
\n
· SSL/TLS Certificates
\n
· Certificate Signing Requests (CSR)
\n
· Certificate Revocation Lists (CRL)
\n
· OCSP
\n
· Encryption and Cryptographic Concepts
\n
· Experience with Windows, Linux, cloud platforms, and enterprise network environments.
\n
· Familiarity with DNS, Load Balancers, Web Servers, and Application Servers.
\n
· Experience integrating certificate management with DevOps and CI/CD pipelines.
\n
· Knowledge of security and compliance standards including NIST, PCI-DSS, SOX, HIPAA, and ISO 27001. ·
\n
\n
Generic Managerial Skills, If any
\n
\n
· 5+ years of experience in Certificate Management, PKI Administration, or Cybersecurity Operations.
\n
· Hands-on experience with:
\n
· Microsoft Active Directory Certificate Services (ADCS)
\n
· DigiCert
\n
· Sectigo
\n
· Entrust
\n
· Venafi
\n
· Keyfactor
\n
· AppViewX