PKI architecture Support Analyst

PKI architecture Support Analyst

Denver, CO

Full Time

Experience: 6 - 10 Years

Job Description

Must Have Technical/Functional Skills

• 5+ years of experience in Certificate Management and PKI administration.
• Strong understanding of:
• PKI architecture
• SSL/TLS protocols
• X.509 certificates
• Certificate Signing Requests (CSR)
• Certificate Authorities (CA)
• Hands-on experience with:
• Venafi, DigiCert, Entrust, Sectigo, or Microsoft PKI
• Azure Key Vault, AWS KMS, or equivalent EKM solutions
• HSM technologies (Thales, SafeNet, Luna HSM)
• Experience managing certificate lifecycle automation.
• Knowledge of cryptographic algorithms (RSA, ECC, AES, SHA-256).
• Scripting experience in PowerShell, Python, or Bash

Roles & Responsibilities

• Manage end-to-end SSL/TLS certificate lifecycle including issuance, renewal, revocation, and automation.
• Administer Public Key Infrastructure (PKI) platforms such as Microsoft CA, DigiCert, Venafi, Entrust, or Sectigo.
• Manage Enterprise Key Management (EKM), encryption keys, HSMs (Hardware Security Modules), and key rotation processes.
• Implement certificate discovery, monitoring, and expiration alerting.
• Support cloud-based key management services (Azure Key Vault, AWS KMS, Google Cloud KMS).
• Ensure compliance with security standards and regulatory requirements.
• Troubleshoot certificate-related issues impacting applications, servers, APIs, and network devices.
• Automate certificate and key management processes using PowerShell, Python, or REST APIs.
• Collaborate with Security, Infrastructure, Application, and DevOps teams.