Role :- Digital Certificate/Cybersecurity/System Engineer
Location :- Maplewood, MN (Hybrid – 3 days)
Duration :-12+Months
Need local candidate only relocation not allowed.
Job Description:-
As a Digital Certificate Engineer, you will be responsible for managing and maintaining our Public Key Infrastructure (PKI) and ensuring the security and integrity of our digital certificates. You will work closely with various teams to implement and automate certificate management processes, ensuring seamless and secure operations.
- Manage and maintain the Public Key Infrastructure (PKI) including certificate authorities, registration authorities, and related components.
- Oversee the lifecycle of digital certificates, including issuance, renewal, and revocation.
- Manage Microsoft Active Directory Certificate Services (ADCS) environment with Network Device Enrollment Services (NDES) connected into both Microsoft Intune and Jamf.
- Utilize Venafi, Sectigo, Amazon Certificate Manager (ACM), and Azure Key Vault for certificate management.
- Automate certificate renewal and installation processes using Venafi, ACME, Sectigo Network Agent, and VCert.
- Collaborate with IT and security teams to ensure compliance with security policies and best practices.
- Troubleshoot and resolve issues related to digital certificates and PKI by providing level 3 support.
- Stay up-to-date with industry trends and advancements in PKI and digital certificate management.
Skills:
- Proven experience managing Public Key Infrastructure (PKI).
- Hands-on experience with Microsoft Active Directory Certificate Services (ADCS).
- Proficiency with Venafi, Sectigo, Amazon Certificate Manager (ACM), and Azure Key Vault.
- Experience with automating certificate renewal and installation using tools such as Venafi, ACME protocol, Sectigo network agent, and VCert.
- Strong understanding of cryptographic principles and digital certificate management.
- Excellent problem-solving skills and attention to detail.
- Strong communication and collaboration skills.
- Relevant certifications such as CISSP, CISM, or similar.
- Experience with scripting languages such as PowerShell or Python.
- Familiarity with cloud security best practices.
Regards,
Piyush Singh
Technical Recruiter
Email: piyush@tekintegral.com
