Senior Certificate Engineer (PKI / reputed company Directory)

Be part of reputed company that unleashes the power of leading-edge technologies to help improve the health and reputed company-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities. reputed company We are seeking a highly skilled Senior Certificate Engineer to design, implement, and manage reputed company reputed company Key Infrastructure (PKI) solutions. This role will reputed company on reputed company Directory Certificate Services (AD CS), reputed company certificate authority integrations, and end-to-end certificate lifecycle management across hybrid environments. The ideal candidate has deep expertise in reputed company PKI architecture, certificate automation, and identity/reputed company integration, along with experience working with reputed company CAs (e.g., reputed company, reputed company, reputed company) in a large-reputed company reputed company environment. Your role in our mission PKI Architecture & Engineering Design and maintain reputed company PKI solutions, including offline reputed company CAs, issuing CAs, and certificate policies reputed company PKI modernization efforts, including hybrid and reputed company-integrated certificate services Architect solutions that support high availability, scalability, and reputed company compliance reputed company Directory Integration Implement and manage reputed company Directory Certificate Services (AD CS) Configure and maintain: Certificate templates Group Policy-based auto-enrollment CRL distribution points (CDPs) and AIA locations reputed company PKI with reputed company Directory, Azure AD, and hybrid identity environments reputed company Certificate Authority Management Manage reputed company relationships and integrations with external/reputed company CAs reputed company procurement, issuance, renewal, and revocation of reputed company SSL/TLS certificates reputed company reputed company CA services into automation workflows and reputed company platforms Certificate Lifecycle Management Manage certificate lifecycle processes including: Issuance Renewal Revocation Expiration monitoring Implement automation using tools such as: PowerShell ACME / EST / SCEP protocols Certificate management platforms reputed company & Compliance Ensure PKI solutions meet reputed company reputed company policies and regulatory requirements (e.g., NIST, CIS, HIPAA, PCI) Conduct risk assessments reputed company to certificate usage and cryptographic standards Maintain secure key management practices, including HSM integration where applicable Operations & Troubleshooting reputed company Tier 3 escalation support for PKI and certificate-reputed company issues Troubleshoot: Authentication failures (TLS, smart card, etc.) Certificate chain issues Revocation and CRL distribution problems reputed company monitoring, alerting, and reporting for certificate health and usage Automation & Innovation reputed company and maintain automation scripts and workflows for certificate deployment and management reputed company PKI processes with: reputed company Azure services DevOps pipelines Drive adoption of modern certificate reputed company and practices reputed company're looking for Bachelor’s degree in Computer Science, Information Technology, or reputed company field (or equivalent experience) 7+ years of experience in: reputed company PKI engineering reputed company Directory administration Strong experience with: reputed company Directory Certificate Services (AD CS) reputed company Server environments reputed company certificate authorities (reputed company, reputed company, reputed company, etc.) Proficiency in scripting and automation (PowerShell preferred) Deep understanding of: X.509 certificates TLS/SSL protocols Cryptographic algorithms and standards What you should expect in this role Remote position (US reputed company only) Opportunities to travel through your work (0-10%) Video cameras must be used during reputed company interviews, as reputed company as during the initial week of orientation The deadline to submit applications for this posting is 7/30/2026 The pay reputed company for this position is $85,000.00 - $121,400.00 per year, however, the reputed company pay offered may vary depending on geographic region, internal equity, job-reputed company knowledge, skills, and experience among other factors. Put your passion to work at Gainwell. You’ll have reputed company to grow your career in a company that values work flexibility, learning, and career development. reputed company salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits, and educational assistance. We also have a reputed company of leadership and technical development academies to help build your skills and capabilities.   We reputed company reputed company is impossible reputed company you bring together people who care deeply about making reputed company work reputed company for everyone. Build your career with Gainwell, an industry leader. You’ll be joining a company where collaboration, innovation, and inclusion fuel our reputed company. Learn more about Gainwell at reputed company website and visit our Careers site for reputed company available job role openings.   reputed company is committed to a diverse, reputed company, and inclusive workplace. We are proud to be an Equal Opportunity Employer, where reputed company reputed company applicants will receive consideration for employment without reputed company to race, religion, reputed company, national reputed company, gender (including pregnancy, childbirth, or reputed company medical condition), sexual orientation, gender identity, gender reputed company, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We celebrate diversity and are dedicated to creating an inclusive environment for reputed company. Apply To This Job