Forward Deployed PKI Engineer

🕒 Yesterday

🇺🇸 United States – Remote

💵 $125k - $250k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👷🏻‍♀️ Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

ITVA

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2024

🏢 Enterprise

🔒 Cybersecurity

☁️ SaaS

Enterprise • Cybersecurity • SaaS

ITVA is a company that provides a software platform and services to safely implement AI on critical IT infrastructure (utilities, banks, federal agencies, etc. ). ITVA discovers and continuously maps every device, connection, and flow across IT, OT, and cloud to create a time-series digital twin and data lake, then runs AI-driven automation, triage, vulnerability assessment, and compliance auditing against the twin (not live production). They also offer professional, support, and managed services to deploy, integrate, and operate the platform for enterprise customers.

📋 Description

• Lead deployments of ITVA's certificate lifecycle management capabilities across complex enterprise customer environments • Integrate ITVA with enterprise certificate authorities, including Microsoft Active Directory Certificate Services (AD CS) and commercial CA platforms • Implement AI-powered certificate discovery, monitoring, troubleshooting, and lifecycle automation workflows • Automate certificate issuance, renewal, revocation, and deployment across diverse enterprise systems • Work directly with customer security, infrastructure, and PKI teams to understand operational challenges • Troubleshoot complex PKI issues involving certificate chains, trust stores, TLS, mutual TLS, and enrollment protocols • Help enterprises evaluate cryptographic risks and prepare for evolving security standards, including post-quantum cryptography • Collaborate with ITVA's software engineering team to design and develop product features, integrations, and automation capabilities • Translate complex customer requirements into scalable product improvements • Serve as a trusted technical advisor for enterprise PKI modernization initiatives

🎯 Requirements

• 7+ years of hands-on experience in enterprise PKI, certificate services, cryptographic infrastructure, or certificate lifecycle management • Deep understanding of X.509 certificates, certificate chains, trust models, TLS, and mutual TLS • Extensive experience administering Microsoft Active Directory Certificate Services (AD CS) or comparable enterprise PKI systems • Strong knowledge of certificate issuance, renewal, revocation, CRLs, OCSP, CSRs, and certificate templates • Experience managing certificates across Windows and Linux servers, enterprise applications, and networking infrastructure • Proven ability to troubleshoot complex PKI and cryptographic issues independently • Experience with PowerShell, Python, Bash, or similar scripting languages for automation • Strong communication skills and experience collaborating with enterprise customers or cross-functional teams • Interest in AI-driven security automation and emerging cryptographic technologies • Nice-to-have: Experience with certificate lifecycle management platforms such as DigiCert, Venafi, Keyfactor, or Sectigo • Nice-to-have: Familiarity with ACME, SCEP, EST, and CMP enrollment protocols • Nice-to-have: Experience with HSMs, enterprise key management, and cloud PKI services • Nice-to-have: Experience managing certificates on F5 BIG-IP, Fortinet, NGINX, Apache, IIS, or similar systems • Nice-to-have: Familiarity with post-quantum cryptography, NIST standards, and cryptographic migration planning • Nice-to-have: Experience with Microsoft Intune, NDES, Active Directory, or enterprise device identity management • Nice-to-have: Experience supporting critical infrastructure, government, utilities, or highly regulated industries • Nice-to-have: Experience developing API integrations or PKI automation tools

🏖️ Benefits

• Bring AI to critical infrastructure • Gain hands-on experience with post-quantum security challenges • Directly influence the future of enterprise certificate management • Collaborate with software engineers to build new product capabilities • Work on complex enterprise-scale security, reliability, and automation problems • Join an engineering-driven company

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume