Senior PKI Engineer

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $101.9k - $132.8k / year

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Blackbaud

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

☁️ SaaS

🤝 Non-profit

🤝 B2B

💰 $6.5M Series A on 2000-02

SaaS • Non-profit • B2B

Blackbaud is a cloud software company that builds intelligent solutions for social impact, focusing on nonprofit organizations. It provides products and services for fundraising, donor management, engagement, and sector-specific cloud solutions to help charities, educational institutions, and other mission-driven organizations move faster and work smarter. Blackbaud also offers training, support, developer resources, a partner marketplace, and industry research through the Blackbaud Institute. The company emphasizes privacy, security, and corporate social responsibility.

📋 Description

• Administer and maintain Microsoft Active Directory Certificate Services (AD CS), including issuing CAs, certificate templates, enrollment services, autoenrollment, NDES, and CRL publication • Operate the certificate lifecycle platform, such as Venafi Trust Protection Platform or Keyfactor Command • Monitor certificate inventory, process requests, support renewals, and troubleshoot integrations • Use Fortanix Data Security Manager and other HSM-backed services in PKI operations • Investigate and resolve certificate issuance, renewal, trust chain, revocation, NDES enrollment, and key access issues • Perform PKI health checks, patching, maintenance, backups, and recovery testing • Respond to certificate expiration alerts and coordinate renewals with application and infrastructure owners • Maintain PowerShell scripts, scheduled tasks, reports, and PKI automation • Maintain CLM/CLaaS infrastructure • Keep documentation, runbooks, and certificate records accurate • Support audits, change management, and incident response • Keep established PKI services secure, available, documented, and running smoothly

🎯 Requirements

• Strong hands-on experience operating Microsoft AD CS in an enterprise environment, including NDES • Experience administering Venafi Trust Protection Platform or Keyfactor Command • Working knowledge of Fortanix Data Security Manager or comparable HSM solutions, including how PKI services use protected keys • Strong understanding of X.509 certificates, certificate chains, enrollment, revocation, TLS, and private key protection • PowerShell scripting and troubleshooting skills • Ability to work with Active Directory, DNS, networking, application, and key management teams to resolve certificate issues • Understanding of cryptographic management in Microsoft Azure or Amazon AWS • Understanding and experience with certificate configuration and management on content delivery networks, web application firewalls, network load balancers and Azure application gateways • Experience with change control, operational documentation, and production support • Experience and knowledge of offline root CA ceremonies and maintenance processes associated with an ORCA • Experience supporting code signing or publicly trusted TLS certificates • Familiarity with PKI backup, recovery, and audit requirements

🏖️ Benefits

• Medical, dental, and vision insurance • Remote-flexible workforce • Wellness Programs • 401(k) program with employer match • Flexible paid time off • Generous Parental Leave • Donations for Doers • Pet insurance, legal and identity protection • Tuition reimbursement program