Senior PKI Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

IT Labs

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

IT Labs is a company that provides a wide range of services including AI training for businesses, DevOps, business agility, cybersecurity, and quality assurance. They offer customizable engagement models like 'Team as a Service' and 'CTO-as-a-Service' to fit the specific needs of clients. IT Labs is also involved in cloud and data strategy consulting. By empowering organizations with cutting-edge technological solutions, IT Labs helps transform businesses across various industries, with a focus on SaaS platforms and digital products.

📋 Description

• Implement and support machine certificate-based authentication for Windows endpoints • Integrate an existing enterprise PKI environment with Palo Alto GlobalProtect Pre-Logon • Support secure device authentication before Windows user login • Configure and troubleshoot certificate enrollment, renewal, expiration, and revocation • Work with Microsoft Intune, Active Directory, and Windows endpoint management • Ensure certificates and private keys are securely stored and protected, including TPM-backed key scenarios where applicable • Support CRL and OCSP validation and certificate revocation processes • Configure and troubleshoot GlobalProtect certificate authentication and pre-logon connectivity • Support the transition from machine/device identity to authenticated user identity • Work with network and security teams on Prisma Access, firewall policies, and secure endpoint connectivity • Troubleshoot certificate, authentication, and connectivity issues across endpoints • Support resilience and failover scenarios across GlobalProtect / Prisma Access gateways • Document technical configurations, operational processes, and troubleshooting procedures • Collaborate with endpoint, networking, identity, and security teams

🎯 Requirements

• Strong hands-on experience with Public Key Infrastructure (PKI) in enterprise environments • Strong knowledge of Microsoft AD CS / Certificate Services or comparable enterprise PKI solutions • Experience with machine/device certificates • Experience with certificate enrollment and auto-enrollment • Experience with certificate lifecycle management • Experience with certificate renewal and revocation • Experience with CRL / OCSP • Experience with X.509 certificates • Experience with private key management • Strong experience with Windows enterprise environments • Experience with Active Directory • Experience with Microsoft Intune or another enterprise endpoint management platform • Strong troubleshooting skills across certificates, authentication, endpoint configuration, and network connectivity • Experience working in security-conscious enterprise environments • U.S. citizenship is required • Must be based in the United States • Ability to work on an Individual Contractor or B2B contract basis • Experience with Palo Alto GlobalProtect, Prisma Access, and GlobalProtect Pre-Logon preferred • Experience with certificate-based VPN authentication preferred • Understanding of Always-On VPN / Always-On GlobalProtect architectures preferred • Experience with TPM-backed certificates and hardware-protected private keys preferred • Experience with Microsoft Entra ID preferred • Experience with CrowdStrike, Microsoft Defender, Tanium, or Qualys preferred • PowerShell scripting experience preferred • Experience working in regulated or high-security environments preferred

🏖️ Benefits

• Paid Time Off (PTO) included as part of the engagement • Remote work arrangement • Full-time commitment aligned with the client's business hours and project needs