Highlights
In this role, you will be responsible for the administration of Microsoft Active Directory Certificate Services (AD CS), management of publicly trusted TLS certificates, automation of certificate lifecycle activities, and troubleshooting certificate trust and encryption-related issues across enterprise environments. We are looking for an experienced PKI / Certificate Lifecycle Management Engineer to manage and enhance our enterprise Public Key Infrastructure (PKI) services and certificate management processes.
Numbers & Facts
| Location | Irving, TX |
| Job Type | Contractor |
| Salary | $110,000–$130,000 Per Year |
Description
Other Alternate Location is: Westerville OH, Phoenix AZ
- We are looking for an experienced PKI / Certificate Lifecycle Management Engineer to manage and enhance our enterprise Public Key Infrastructure (PKI) services and certificate management processes.
- In this role, you will be responsible for the administration of Microsoft Active Directory Certificate Services (AD CS), management of publicly trusted TLS certificates, automation of certificate lifecycle activities, and troubleshooting certificate trust and encryption-related issues across enterprise environments.
- You will work closely with Cybersecurity, Identity & Access Management, Infrastructure, Cloud, Application, and Operations teams to ensure secure, reliable, and scalable certificate services.
Job Responsibilities
PKI Administration
Administer and support Microsoft Active Directory Certificate Services (AD CS).
Manage enterprise issuing CAs and offline root CAs.
Maintain certificate templates, enrollment permissions, and auto-enrollment configurations.
Support CRL, AIA, and OCSP services.
Perform CA maintenance, upgrades, backups, recovery testing, and operational health monitoring.
Certificate Lifecycle Management
Manage the complete lifecycle of internal and public certificates including issuance, deployment, renewal, replacement, revocation, and retirement.
Support public certificate providers such as DigiCert and Sectigo.
Maintain certificate inventories, ownership records, and renewal tracking.
Monitor certificate expirations and proactively prevent service disruptions.
Coordinate certificate deployments with application, server, network, and cloud teams.
Automation & Integration
Develop and maintain automation using PowerShell, REST APIs, and ACME-based workflows.
Automate certificate request, renewal, deployment, validation, and revocation processes.
Integrate certificate management workflows with ServiceNow, CMDB, monitoring, and security platforms.
Maintain reusable scripts, technical documentation, and operational procedures.
Troubleshooting & Incident Support
Troubleshoot PKI, certificate chain, and trust-related issues.
Diagnose TLS/mTLS handshake failures and certificate validation problems.
Use tools such as OpenSSL, certutil, PowerShell, logs, and network traces to identify root causes.
Support investigations involving certificate outages, renewals, and security incidents.
Governance & Documentation
Maintain operational runbooks and technical documentation.
Support audits, compliance reviews, and security assessments.
Follow secure key-management practices and change-management procedures.
Provide technical guidance to operational and support teams.
Qualifications
- 3+ years of hands-on experience with Enterprise PKI and Certificate Management.
- Strong experience administering Microsoft AD CS environments.
- Experience with Offline Root CA and Issuing CA operations.
- Hands-on experience managing public TLS certificates through providers such as DigiCert or Sectigo.
Strong understanding of: X.509 Certificates, Certificate Chains, CRL and OCSP, CSRs and SANs
Trust Stores, Certificate Revocation
Experience with Active Directory, Group Policy, Windows Server, and Auto-Enrollment.
Strong PowerShell scripting and automation experience.
Hands-on experience using OpenSSL for certificate creation, conversion, and troubleshooting.
Ability to troubleshoot certificate trust, TLS, and mTLS issues across enterprise environments.
Strong communication, documentation, and stakeholder management skills.
Skills
Benefits
Paid Time-Off, 401K Match, Medical, Dental, Vision
About Company
AgreeYa is a global systems integrator delivering a competitive advantage for its customers through software, solutions, and services. Established in 1999, AgreeYa is headquartered in Folsom, California, with a global footprint and a team of more than 1,800+ professionals across offices. AgreeYa works with 550+ organizations ranging from Fortune 100 firms to small and large businesses across industries such as Telecom, Banking, Financial Services & Insurance, Healthcare, Utility & Energy, Technology, Public Sector, Pharma & Biotech, Retail, Client, and others. Please visit us at www.agreeya.com for more information.