PKI Security Support Engineer

Job Description

• Oversee day-to-day PKI operations, including the issuance, renewal, and revocation of digital certificates.
• Manage certificate lifecycle in both enterprise and cloud environments.
• Monitor and maintain certificate authorities (CA) and related infrastructure, ensuring high availability and security.
• Implement best practices for secure key management, including key rotation, backup, and recovery processes.
• Support cryptographic hardware devices, such as HSMs (Hardware Security Modules), ensuring proper configuration and compliance.
• Identify and resolve issues related to PKI infrastructure, certificates, and cryptographic hardware.
• Provide Level 1/2 support for PKI-related incidents and requests.
• Document troubleshooting steps and resolutions to improve future responses.
• Ensure PKI operations align with industry standards and regulatory requirements.
• Conduct regular audits of PKI systems and assist with compliance reporting.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).

Experience:

• Minimum of 3 years in IT with a focus on systems administration, networking, or cybersecurity.
• At least 2 years of hands-on experience with PKI or certificate operations
• Strong understanding of PKI concepts, protocols (e.g., TLS/SSL, x.509), and standards (e.g., FIPS, NIST).
• Familiarity with certificate management tools and software.
• Experience with scripting languages (e.g., PowerShell, Python) is a plus.
• Excellent problem-solving skills and attention to detail.
• Effective communication skills to interact with technical and non-technical stakeholders.