Identity Architect

Job Summary

As an Identity Engineer, you will be responsible for designing, administering, supporting, and modernizing enterprise Public Key Infrastructure (PKI) services, including Certificate Authorities (CA), certificate lifecycle management, and cryptographic key management solutions. The role focuses on enhancing security, automating certificate operations, ensuring compliance, and delivering scalable certificate-based authentication and encryption services across on-premises, hybrid, and cloud environments.

Responsibilities and Accountabilities

• Administer, maintain, and support enterprise Public Key Infrastructure (PKI) environments, including Microsoft Certificate Services (AD CS), Certificate Authorities (CA), Registration Authorities (RA), Online Responders, and certificate lifecycle management platforms.
• Manage certificate issuance, renewal, revocation, validation, and recovery processes for users, servers, applications, devices, and non-human identities.

Required Qualifications

• 8 to 12+ years of hands-on experience managing enterprise Public Key Infrastructure (PKI) environments and certificate lifecycle management solutions.
• Strong practical experience with Microsoft Active Directory Certificate Services (AD CS), Certificate Authorities (CA), certificate templates, certificate enrollment, and certificate lifecycle processes.
• Demonstrated hands-on expertise in:
• Public Key Infrastructure (PKI) design and administration.
• Certificate Authorities, Certificate Revocation Lists (CRLs), Online Certificate Status Protocol (OCSP), and certificate trust chains.
• Cryptographic concepts including public/private keys, digital signatures, encryption, hashing algorithms, and key management.
• Hardware Security Modules (HSMs), Azure Key Vault, and cryptographic key protection mechanisms.
• Certificate-based authentication, TLS/SSL, mutual TLS (mTLS), code signing, and secure communications.
• Experience implementing certificate lifecycle management solutions and certificate automation across enterprise environments.
• Experience supporting cloud and hybrid PKI environments integrated with Microsoft Entra ID, Intune, Azure services, and enterprise security platforms.
• Strong knowledge of certificate governance, compliance requirements, cryptographic standards, and security best practices.
• Experience with PowerShell scripting and automation for PKI administration, certificate management, and reporting.
• Strong troubleshooting, analytical, and problem-solving skills within complex enterprise environments.
• Effective verbal and written communication skills, capable of working with technical and non-technical stakeholders.

Preferred Qualifications

• Experience with DigiCert, Keyfactor, AppViewX, Venafi, Microsoft Cloud PKI, or similar certificate lifecycle management platforms.
• Experience with Microsoft Intune certificate deployment (SCEP/PKCS), Azure Key Vault, HSM technologies, cryptographic key management, and enterprise PKI governance.
• Experience implementing certificate automation, non-human identity (NHI) management, machine identity security, and PKI modernization initiatives.
• Knowledge of Zero Trust, modern identity security, certificate-based authentication, quantum-safe cryptography trends, and cloud security architectures.
• Microsoft certifications such as SC-300, AZ-500, AZ-104, or relevant PKI/security certifications; healthcare or other regulated industry experience is a plus.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.