Senior PKI Platform Administrator

Job Description

he Senior PKI Platform Administrator is the enterprise owner and technical architect of the company's internal and external digital trust infrastructure. Utilizing our centralized, cloud-based Certificate Lifecycle Management (CLM) and Public Key Infrastructure as a Service (PKIaaS) ecosystem, this role is responsible for engineering the "last mile" integrations, automation pathways, and governance models that allow teams to safely self-service their cryptographic needs.

This role focuses on platform health, vendor service management, automation enablement (via APIs and localized Orchestration Agents), and translating organizational security policies into effective guardrails. This position ensures the elimination of certificate-related downtime while maintaining a rigorous security posture across multi-cloud and on-premises environments.

Centralized CLM & PKIaaS Platform Ownership:

Act as the primary administrator, subject matter expert, and product owner for the enterprise Certificate Lifecycle Management (CLM) portal and integrated Public Certificate Authority (CA) infrastructure.

Manage user access control, tenant health, role-based permissions (RBAC), and certificate templates within the centralized management platform.

Oversee Public Domain Control Validation (DCV) processes with external CAs to ensure seamless, automated issuance of public-facing certificates.

Monitor platform consumption metrics, API health, and certificate credit pools to optimize licensing and enterprise spend.

Provide strategic leadership in the development and execution of certificate lifecycle management.

Collaborate with senior stakeholders to align PKI initiatives with organizational goals and objectives.

Stay updated with emerging PKI related trends, threats, and technologies to provide expert guidance and recommendations.

Integration Engineering & Dev Ops Enablement :

Deploy, configure, and maintain localized platform orchestration tools and agents across enterprise networks to facilitate automated certificate lifecycle actions.

Partner with Application, Dev Ops, and Infrastructure teams to provide secure API endpoints, SDKs, and documentation for integrating certificate issuance into CI/CD pipelines (e.g., automated build tools, configuration management scripts).

Standardize and publish automated enrollment mechanisms (such as ACME protocols, enrollment gateways, or MDM integrations) for cloud workloads, containers, and enterprise endpoints.

Act as a consultative architectural resource for internal teams designing custom or legacy system integrations with the central PKI platform.

Benefit packages for this role may include healthcare insurance offerings and paid leave as provided by applicable law.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.

If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to  learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:

Bachelor's Degree in Computer Science, Information Systems or a related field required

Professional certifications such as CISSP, CISM, GIAC or CCSP required.

Five to eight years of related experience or an equivalent combination of education, training and experience required.

Extensive knowledge of Cryptographic Principles:
Strong foundational understanding of Public Key Infrastructure (PKI), technologies, and best practices.

Certificate Lifecycle Management (CLM):
Hands-on experience using modern, enterprise-grade CLM platforms and managing public/private Certificate Authority integrations.

Infrastructure & Networking:
Solid understanding of network protocols (TLS/SSL, HTTPS, DNS, TCP/IP) and how certificates are utilized by enterprise infrastructure components like load balancers, web servers, and firewalls.