*Remote if in: IL, TX, FL, GA, MA, MD, MN, NC, NJ, NY, DC, WI or in office Chicago, IL/Dallas, TX*

A prestigious company is looking for a Security PAM - PKI Consultant. This consultant will support the PAM team for the PKI Implementations across the enterprise. This consultant will automate ADCS (Active Directory Certificate Services) and HSM (Hardware Security Modules). Any CyberArk and Hashicorp vault experience is a plus.

Responsibilities:

• Support the installation and configuration of PKI Solution (eg, ADCS, HSM)
• Implement and manage certificate templates and revocation configurations.
• Participate in all design sessions for PKI in multiple datacenters and private cloud and provide knowledge of company PKI architecture and configurations.
• Help build PKI management capabilities using ADCS and on prem HSM's.
• Support the company's ability to maintain development, pre-production, and production PKI environments.
• Assist in building and maintaining secure integrations with ADCS and HSM's.
• Systems requirements, secured platforms, disaster recovery, capacity sizing, and availability planning.
• Cover on premise, hybrid, and/or cloud infrastructure, and recommendations of using PKI solution to secure internal encryption requirements.
• Enterprise integrations review, including group policies, directory, authentication methods, monitoring strategies, and other relevant technologies and security tool
• Hybrid Model and requirements with On-Prem high availability ADCS.
• Support defining phased implementation approach (eg, AWS, production, disaster recover, backup datacenter) including priorities and phases for component implementations and secure connections configurations.

Qualifications:

• Experience with Microsoft certificate authority PKI infrastructure.
• Experience with hardware security modules (HSMs).
• Requires in-depth knowledge of encryption algorithms, protocols, and best practices.
• 5+ years of experience in PKI infrastructure including Microsoft Certificate Authority and HSM's.
• Knowledge of cryptographic operations, secure key storage, and key life cycle management with HSM and encryption tools.
• Knowledge of end-to-end encryption, data at rest, and data in transit protection methodologies.
• Ability to interpret logs and events related to PKI, HSMs, encryption, and PAM activities.