PKI (Public Key Infrastructure) Specialist (Contract)

Key responsibilities

• Administer end-to-end certificate lifecycle management, including issuance, renewal, revocation, replacement, and expiration tracking.
• Provide on‑site hands‑and‑eyes support for remote technical teams accessing IT infrastructure devices.
• Execute hosting provisioning (VMs, database, storage, backup) for IT and OT applications, following internal change management process.
• Deploy and support SSL/TLS certificates across servers, middleware, databases, web applications, APIs, and network devices.
• Implement certificate discovery, inventory management, and compliance reporting capabilities.
• Manage cryptographic keys and Hardware Security Modules (HSMs) in accordance with security standards.
• Develop and maintain automation scripts, APIs, and workflows for certificate provisioning and renewal.
• Support PKI integrations with enterprise tools such as monitoring, ITSM, vulnerability management, and secrets management platforms.
• Troubleshoot certificate, authentication, encryption, and trust‑chain related issues.
• Maintain PKI operational procedures, standards, and audit documentation.
• Collaborate with application, infrastructure, cybersecurity, and vendor teams on PKI projects and certificate deployments.
• Support modernization initiatives including TLS 1.3 adoption, certificate governance, and Post‑Quantum Cryptography readiness.

Required skills

• PKI, X.509 certificates, Certificate Authorities (CA), Registration Authorities (RA), Certificate Revocation Lists (CRL), OCSP.
• Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX or similar PKI platforms.
• Cryptographic technologies: RSA, ECC, AES‑256, SHA‑2, SHA‑3, TLS 1.2/1.3.
• Windows and Linux operating systems.
• Scripting with PowerShell, Python, or shell.
• Hardware Security Modules (HSM), RBAC, audit controls, security compliance.
• Integration of PKI solutions with enterprise applications, middleware, and database platforms.
• Experience with AWS, virtualization (VMs), database provisioning, storage and backup solutions.