$50 - $55 Our client is seeking a fully onsite PKI Engineer for a 12+ month contract in Irving, TX. No C2C! •Required•+ Bachelor's degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience). + Security+, CISSP, GSEC, or equivalent security certifications. + Microsoft security or identity certifications preferred. + Experience with Azure, AWS, or GCP certificate management services. + Knowledge of Zero Trust principles and modern authentication technologies. + 3-5 years of PKI engineering, information security, or infrastructure security experience. + Experience managing Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms. + Strong understanding of PKI, certificate lifecycle management, SSL/TLS, X.509 certificates, and cryptographic principles. + Experience with certificate enrollment, issuance, renewal, revocation, and validation processes. + Knowledge of HSMs and cryptographic key management. + Strong troubleshooting, analytical, and documentation skills. + Experience with PowerShell or other automation/scripting technologies. •Day to Day•+

PKI Infrastructure Administration:

Manage and maintain enterprise PKI platforms, including Certificate Authorities (CAs), Registration Authorities (RAs), HSMs, OCSP responders, and certificate enrollment services. +

Certificate Lifecycle Management:

Issue, renew, revoke, and replace digital certificates for users, devices, servers, applications, cloud services, and network appliances. +

PKI Security & Compliance:

Implement and enforce PKI security controls, certificate policies, certificate practice statements, and cryptographic standards. +

Certificate Automation & Integration:

Design and support automated certificate management solutions using Microsoft AD CS, Venafi, Keyfactor, DigiCert, ACME, and scripting technologies. +

Cryptographic Key Management:

Manage cryptographic key generation, storage, rotation, escrow, and destruction processes. +

Troubleshooting & Support:

Diagnose and resolve certificate-related issues impacting applications, websites, VPNs, and authentication systems. +

PKI Standards & Documentation:

Develop and maintain PKI architecture diagrams, procedures, technical documentation, and governance standards. +

Security Operations & Continuous Improvement:

Participate in security assessments, incident investigations, vulnerability remediation, and infrastructure modernization efforts.

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP's Employment Accommodation policy. Applicants need to make their needs known in advance.