PKI Engineer

Strong understanding of oPKI architecture SSLTLS protocolsoX.509 certificates Certificate Signing Requests (CSR) Certificate Authorities (CA)Hands-on experience with Venafi| DigiCert| Entrust| Sectigo| or Client PKI Azure Key Vault| AWS KMS| or equivalent EKM solutions HSM technologies (Thales| SafeNet| Luna HSM)Experience managing certificate lifecycle automation. Manage Enterprise Key Management (EKM)| encryption keys| HSMs (Hardware Security Modules)| and key rotation processes.

Job Title: PKI Engineer
Location: Chicago IL
Duration: 6 months (Extendable)
Pay Range: $48-51/Hour on W2/C2C (All Inclusive)
Request ID: 115893 -1


Position Summary:
Manage end-to-end SSLTLS certificate lifecycle including issuance| renewal| revocation| and automation. Administer Public Key Infrastructure (PKI) platforms such as Client CA| DigiCert| Venafi| Entrust| or Sectigo. Manage Enterprise Key Management (EKM)| encryption keys| HSMs (Hardware Security Modules)| and key rotation processes. Implement certificate discovery| monitoring| and expiration alerting.Support cloud-based key management services (Azure Key Vault| AWS KMS| Google Cloud KMS). Ensure compliance with security standards and regulatory requirements. Troubleshoot certificate-related issues impacting applications| servers| APIs| and network devices. Automate certificate and key management processes using PowerShell| Python| or REST APIs. Collaborate with Security| Infrastructure| Application| and DevOps teams.
Essential Skills: Role Requirements 5 years of experience in Certificate Management and PKI administration. Strong understanding of oPKI architecture SSLTLS protocolsoX.509 certificates Certificate Signing Requests (CSR) Certificate Authorities (CA)Hands-on experience with Venafi| DigiCert| Entrust| Sectigo| or Client PKI Azure Key Vault| AWS KMS| or equivalent EKM solutions HSM technologies (Thales| SafeNet| Luna HSM)Experience managing certificate lifecycle automation. Knowledge of cryptographic algorithms (RSA| ECC| AES| SHA-256).Scripting experience in PowerShell| Python| or Bash. Preferred Experience in hybrid cloud environments (Azure| AWS| GCP).Knowledge of DevSecOps and CICD integration. Experience with Kubernetes secrets and certificate management. Security certifications such as CISSP Security Azure Security Engineer (AZ-500) Certified PKI Professional

Skills: Cyber Security
Experience Required: 6-8