PKI Engineer, Certificate Authority & Active Directory
Overview
You own the Certificate Authority (CA) Management core, Active Directory, and platform authentication across Windows and Unix environments for Winsnow, Inc. This onsite contract role in Dallas, TX drives the processes and controls around CA operations, integrating automation tools to harden the PKI infrastructure. You'll partner with security and infrastructure teams, ensuring certificate lifecycle management scales securely. This role stands out for its hands-on focus on CA and AD integration with Windows and Unix systems.
What You'll Do8
- 1Implement controls and processes for CA management, covering certificate issuance, renewal, and revocation.
- 2Integrate PKI automation tools to streamline certificate lifecycle operations.
- 3Secure platform authentication for Windows and Unix environments.
- 4Collaborate with infrastructure teams to align CA operations with security policies.
- 5Develop PKI monitoring and reporting for certificate health and compliance.
- 6Automate certificate provisioning for Active Directory integrated services.
- 7Document CA procedures and maintain audit trails for certificate management.
- 8Troubleshoot certificate and authentication issues across Windows and Unix.
Requirements7
- 13+ years in PKI engineering, focusing on CA management.
- 23+ years with Active Directory integration for certificate services.
- 3Proficiency with Windows and Unix authentication protocols.
- 4Experience with PKI automation tools (e.g., Venafi, HyTrust, or custom scripts).
- 5Hands-on with HSM and key management best practices.
- 6Knowledge of SSL/TLS certificate lifecycle management.
- 7Ability to pass an in-person interview in Dallas, TX 75202.
Salary Insight
$50 - $55k per year
Location
Required Skills
Similar open positions
Explore active roles that match your skills and interests.
Danta Technologies
VerifiedPKI Engineer, Certificate Management & HSM
You will own PKI infrastructure for a Dallas-based enterprise, delivering certificate lifecycle management and HSM integration at scale. You will join a security engineering team of 8, reporting to the CISO, and collaborate with network, application, and compliance teams. This contract role stands out because you will drive the migration to AWS Certificate Manager and Azure Key Vault, modernizing legacy systems in the first 90 days.
Digitive LLC
VerifiedPKI Cyber Security Engineer, AWS & DevOps
You will own PKI design, implementation, and administration across a cloud-first enterprise environment. Your work directly enables secure certificate lifecycle management for mission-critical systems. You will collaborate with DevOps and security teams to integrate PKI with AWS IAM, Kubernetes, and CI/CD pipelines. This role stands out for its hybrid work model and impact on large-scale infrastructure. You bring 8-10+ years of experience to a 6-month engagement with potential to extend.
InfiCare
VerifiedPKI Architect InfiCare San Jose CA Hybrid
Design and architect scalable PKI solutions to support enterprise security requirements. This role drives secure digital identity infrastructure across hybrid environments. Own the end-to-end implementation of robust certificate frameworks. Differentiate by shaping zero-trust security architectures.
631 Booz Allen Hamilton_United States
VerifiedSenior PKI Engineer at Booz Allen Hamilton
Lead ownership of large scale PKI projects for government clients. Analyze identity lifecycle and define enterprise identity records. Design deploy support systems that verify user privileges and manage credentials for critical assets. Implement enterprise class solutions to stop adversaries. Support national security missions.
Digitive LLC
VerifiedCyberArk Engineer, PAM & Privileged Access
You will own the CyberArk privileged access management platform at enterprise scale, securing 3,000+ privileged accounts across production and non-production environments. You will report to the IAM Lead and collaborate with security operations and infrastructure teams on AD/LDAP integration and MFA enforcement. This 12+ month contract in Coppell, TX puts you at the center of a PAM modernization initiative, with direct impact on audit compliance and incident response.
K-Tek Resourcing LLC
VerifiedSecurity Consultant, Cisco ASA Palo Alto Firewalls & ISE - Dallas Onsite
Own security engineering for enterprise network protection at scale in Dallas onsite. You will design and implement firewall policies, access control, and VPN authentication across Cisco ASA FXOS, Palo Alto firewalls, and ISE. Collaborate with network and security teams to protect critical assets and ensure policy consistency in dynamic environments. This role offers hands-on config and tuning that directly reduces risk and improves incident response capabilities.