Senior PKI Engineer

Job Description Insight Global is seeking a Senior PKI Engineer to join the Global Information Security (GIS) team at a Fortune 50 financial institution. This ideal candidate will design, implement, and operate enterprise-grade Public Key Infrastructure (PKI) services with a strong focus on Microsoft Active Directory Certificate Services (AD CS) and Active Directory (AD) integration. They will need to have hands-on implementation and integration knowledge of certificate lifecycle management, CA hierarchy governance, enrollment automation, HSM-backed key protection, CA backup/restore, migration, and integration with Windows Server, Linux, network/security devices, cloud providers, MDM/EDR, and zero-trust tools. Key Responsibilities Include: Architecture & Design u2022u2003Design and maintain enterprise PKI architectures including Root, Policy, and Issuing CAs. u2022u2003Integrate PKI with Active Directory, Entra ID, Intune/MDM, GPOs, and Azure AD. u2022u2003Develop certificate lifecycle policies including revocation and renewal. u2022u2003Implement HSM-backed key storage and disaster recovery designs. Operations & Automation u2022u2003Own certificate lifecycle management including automation. u2022u2003Manage CRL and OCSP publication and availability. u2022u2003Implement scripting and automation using PowerShell and APIs. u2022u2003Operate and maintain secure PKI infrastructure. Security & Compliance u2022u2003Apply strong key management practices and CA hardening baselines. u2022u2003Perform PKI risk assessments and access reviews. u2022u2003Lead incident response for PKI-related outages. u2022u2003Maintain compliance with NIST, CA/B Forum, and internal frameworks. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: Skills and Requirements u2022u20038+ years in Security Engineering or Identity Infrastructure. u2022u20035+ years hands-on with Microsoft AD CS and enterprise PKI. u2022u2003Deep knowledge of X.509, CRLs, OCSP, EKUs, RSA/ECC, SHA-2. u2022u2003Strong PowerShell, Python, or C# scripting and Windows Server administration skills. u2022u2003Experience with Linux PKI, TLS/SSL, VPN authentication. u2022u2003Azure PKI integrations and HSM experience (Thales, Entrust, nCipher).

Created: 2026-02-25