PKI SME - Remote​/Telecommute

Job Overview

Requirement/Must Have:

• 1+ years of experience in enterprise PKI and certificate lifecycle management.
• Strong expertise in automation and cloud integrations.
• Experience with consulting and customer-facing roles.

Responsibilities:

• Perform PKI current-state assessments (architecture, governance, lifecycle processes).
• Evaluate internal CA (AD CS), public CA usage, certificate inventory, and key management practices.
• Identify risks, gaps, and improvement areas, and provide actionable recommendations.
• Define target-state PKI architecture (on-prem, cloud, hybrid).
• Design PKI governance model, policies, standards, and CPS.
• Develop certificate lifecycle automation strategy and tooling roadmap.
• Evaluate and recommend platforms (e.g., AppViewX, Venafi, Keyfactor).
• Lead deployment of Root/Issuing CA, CLM solutions, and HSM integration.
• Implement certificate issuance, renewal, revocation, and automation workflows.
• Integrate PKI with cloud platforms (Azure/AWS), IAM, and Dev Ops pipelines.
• Define and enforce PKI policies, standards, and operating model.
• Ensure alignment with industry regulations (HIPAA, PCI-DSS, SOX, etc.).
• Support audit readiness and secure key management practices.