PKI Engineer

🕒 April 1

🇧🇷 Brazil – Remote

💵 $15 - $25 / hour

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 65%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Distro

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2021

💼 Consulting

📦 Logistics

👥 HR Tech

Consulting • Logistics • HR Tech

Distro is an AI-driven recruiting platform designed to automate and streamline the hiring process for companies of all sizes. By leveraging smart automation, Distro helps teams quickly vet resumes, conduct structured video interviews, and match candidates to job requirements, enabling efficient and effective hiring. Catering to startups, remote-first companies, and enterprise talent teams, Distro enhances recruitment by reducing manual tasks and facilitating international hiring through its employer of record services.

📋 Description

• Design, implement, and manage enterprise PKI and Certificate Lifecycle Management services • Manage enterprise PKI infrastructure, including Root and Issuing Certificates • Manage certificate issuance, renewal, revocation, rekey, rollover, and retirement • Configure and maintain Offline Root CA, Issuing CAs, certificate templates/profiles, and policy constraints • Manage CRL/OCSP publishing and ensure high availability • Maintain PKI documentation, operational runbooks, and SOPs • Support audits and compliance requirements, including CAB Forum standards • Manage and monitor PKI/HSM operations, including health checks, backups, configurations, and policies • Implement and maintain internal and external certificate lifecycle processes • Monitor certificates for expiration and revoke compromised or obsolete certificates • Assist with enterprise-wide certificate lifecycle requests, issuance, renewal, and revocation • Maintain inventories of machine identities, certificates, keys, and service credentials • Identify orphaned, expired, misconfigured, and at-risk machine identities and certificates • Monitor governance controls and escalate exceptions or risks • Assist with certificate issuance requests and validate required information

🎯 Requirements

• Hands-on experience with ADCS, AWS ACM, and Venafi • Experience with CRL and OCSP maintenance • Experience with AWS Key Vault, cloud and hybrid environments • PowerShell scripting and automation • Technical expertise in Microsoft Active Directory Certificate Services (ADCS), including OCSP, CRLs, certificate templates, key archival, and NDES/SCEP • Experience integrating PKI solutions across network devices, load balancers, and Windows/Linux environments • Understanding of cryptography and encryption standards, including TLS, X.509, RSA/ECC, CSRs, HSMs, and TPMs • Hands-on experience with cloud-based certificate and key management • Strong troubleshooting skills • Experience managing enterprise-scale PKI environments across on-premises and cloud platforms • Knowledge of AD, DNS, IAM operations, and CyberArk Privilege Cloud is beneficial • Relevant security or PKI certifications are advantageous