PKI Engineer

We are seeking an experienced PKI & Digital Signing Engineer to design, implement, administer, and support the organization's Public Key Infrastructure (PKI) and digital signing platforms. The successful candidate will be responsible for managing enterprise certificate services, digital signature solutions, and cryptographic infrastructure while ensuring security, compliance, and high availability across both Windows and Linux environments.

This role requires hands‑on expertise with Signing Hub, ADSS Server, and Entrust Certificate Authority, along with a strong understanding of enterprise PKI architecture, certificate lifecycle management, and secure authentication technologies.

• Design, implement, and maintain enterprise Public Key Infrastructure (PKI) solutions.
• Administer Certificate Authority (CA) infrastructure and certificate lifecycle processes, including issuance, renewal, revocation, and auditing.
• Configure, maintain, and troubleshoot PKI services across Windows Server and Linux platforms.
• Ensure high availability, disaster recovery, and resilience of PKI environments.
• Manage OCSP responders, CRLs, certificate templates, and enrollment services.

• Deploy, configure, administer, and maintain Signing Hub
  .
• Implement and manage ADSS Server for digital signatures, time stamping, signature validation, and verification services.
• Administer and support Entrust Certificate Authority infrastructure and related PKI services.
• Integrate digital signing platforms with enterprise applications, identity management systems, and document management workflows.
• Support digital signature standards including PAdES, XAdES, CAdES
  , and eIDAS where applicable.

• Monitor, secure, and harden PKI and digital signing infrastructure against vulnerabilities and cyber threats.
• Conduct security assessments, audits, and compliance reviews of certificate services.
• Maintain documentation for PKI architecture, operational procedures, and security controls.
• Ensure compliance with organizational security policies and regulatory requirements.

• Install, configure, patch, and maintain Windows Server and Linux systems supporting PKI and digital signing services.
• Implement monitoring, backup, disaster recovery, and capacity planning for PKI infrastructure.
• Automate operational and administrative tasks using Power Shell, Bash, or other scripting languages.

• Provide technical expertise to development, infrastructure, and security teams for PKI-related projects.
• Troubleshoot complex certificate, authentication, encryption, and digital signing issues.
• Support integrations involving TLS/SSL, APIs, identity platforms, and enterprise applications.
• Produce technical documentation, operational runbooks, and knowledge base articles.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience).
• Proven experience designing, implementing, and administering enterprise PKI environments.
• Strong administration experience with:
• Windows Server
• Hands‑on experience with:
• Signing Hub
• ADSS Server
• Entrust Certificate Authority
• Strong knowledge of:
• Public Key Infrastructure (PKI)
• Digital certificates and Certificate Authorities
• TLS/SSL
• OCSP and CRLs
• Hardware Security Modules (HSMs)
• Cryptographic concepts and best practices
• Experience integrating PKI and digital signing solutions with enterprise applications and identity platforms.
• Experience with automation using Power Shell, Bash, or Python.

• Experience with Microsoft Active Directory Certificate Services (AD CS).
• Knowledge of Microsoft Entra  (Azure AD), Active Directory, LDAP, and SSO technologies.
• Experience with cloud‑based PKI services (Azure, AWS, or OCI).
• Familiarity with REST APIs and enterprise application integration.
• Experience working in regulated industries such as finance, healthcare, or government.
• Relevant certifications such as:
• Entrust PKI Certifications
• Microsoft Certified:
  Windows Server
• CompTIA Security+
• CISSP
• Certified Information Security Manager (CISM)

• ADSS Server Administration
• Entrust Certificate Authority
• Certificate Lifecycle Management
• TLS/SSL, OCSP, CRL
• Hardware Security Modules (HSM)
• Windows Server Administration
• Power Shell, Bash, Python
• Active Directory & LDAP
• Digital Signature Standards (PAdES, XAdES, CAdES, eIDAS)
• Security Hardening & Compliance
• Backup, Monitoring & Disaster Recovery

• Strong analytical and troubleshooting abilities.
• Excellent communication and documentation skills.
• Ability to work independently and collaboratively across technical teams.
• Strong attention to detail and commitment to security best practices.
• Effective time management and problem‑solving skills.