PKI (Public Key Infrastructure) Specialist (Contract)

Key Responsibilities • Administer end-to-end certificate lifecycle management, including issuance, renewal, revocation, replacement, and expiration tracking. • Provide on-site hands-and-eyes support for remote technical teams accessing IT infrastructure devices • Execute hosting provisioning (VMs, database, storage, backup) for IT and OT applications, following internal change management process • Deploy and support SSL/TLS certificates across servers, middleware, databases, web applications, APIs, and network devices • Implement certificate discovery, inventory management, and compliance reporting capabilities. • Manage cryptographic keys and Hardware Security Modules (HSMs) in accordance with security standards. • Develop and maintain automation scripts, APIs, and workflows for certificate provisioning and renewal. • Support PKI integrations with enterprise tools such as monitoring, ITSM, vulnerability management, and secrets management platforms • Troubleshoot certificate, authentication, encryption, and trust-chain related issues. • Maintain PKI operational procedures, standards, and audit documentation. • Collaborate with application, infrastructure, cybersecurity, and vendor teams on PKI projects and certificate deployments. • Support modernization initiatives including TLS 1.3 adoption, certificate governance, and Post-Quantum Cryptography (PQC) readiness. Required Skills • 5+ years in IT infrastructure project coordination or delivery, ideally including at least one new-site or facility build-out • Hands-on troubleshooting & configuring experience with network, server hosting, storage/backup, and cloud (AWS) • Manage and maintain enterprise PKI infrastructure, including Certificate Authorities (CA), Registration Authorities (RA), and certificate management platforms. • Strong understanding of Public Key Infrastructure (PKI), X.509 Certificates, Certificate Authorities (CA), Certificate Revocation Lists (CRL), TLS/SSL, and Online Certificate Status Protocol (OCSP) • Experience with Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX, or similar PKI platforms. • Knowledge of cryptographic technologies including RSA, ECC, AES-256, SHA-2/SHA-3, and TLS 1.2/1.3. • Hands-on experience with Windows and Linux platforms. • Scripting experience using PowerShell, Python, or Shell scripting. • Understanding HSMs, RBAC, audit controls, and security compliance requirements. • Experience in integrating PKI solutions with enterprise applications and middleware and database platforms. • 10+ years of PKI, Cybersecurity, or Infrastructure Security experience. • Certifications such as CISSP, CISM, Security+, or PKI-related certifications would be advantages • Experience with certificate lifecycle management (CLM) platforms and automation solutions.