Enterprise public key infrastructure and certificate management services
Remote position based in the United States
Responsibilities
Operate, maintain, and support Microsoft Active Directory Certificate Services (AD CS), including CAs, templates, enrollment services, NDES, and CRL publication
Administer enterprise certificate lifecycle management platforms such as Venafi Trust Protection Platform or Keyfactor Command
Work with Fortanix Data Security Manager and HSM-backed services to resolve key usage issues
Investigate and resolve certificate issuance, renewal, trust chain, revocation, and validation issues
Perform routine PKI health checks, patching, maintenance, backup, and recovery testing
Monitor certificate expiration alerts and coordinate timely renewals
Maintain and improve PowerShell scripts, scheduled tasks, and automation
Maintain CLM and CLaaS infrastructure
Support cryptographic management in Azure and AWS
Support certificate configuration across CDNs, WAFs, load balancers, and Azure Application Gateways
Maintain documentation, runbooks, and support audits and incident response
Support offline root CA ceremonies and maintenance
Requirements
Strong hands-on experience administering Microsoft AD CS in an enterprise environment, including NDES
Experience with certificate lifecycle management platforms such as Venafi or Keyfactor Command
Working knowledge of Fortanix Data Security Manager or comparable HSM solutions
Strong understanding of X.509 certificates, certificate chains, enrollment, revocation, TLS, and private key protection
Practical PowerShell scripting and troubleshooting skills
Ability to collaborate with Active Directory, DNS, networking, and key management teams
Understanding of cryptographic management in Azure or AWS
Experience configuring certificates across CDNs, WAFs, load balancers, and Azure Application Gateways
Experience supporting production environments and change control procedures