Support Engineer – Public Key Infrastructure (PKI)

Role Overview:

We are looking for a dedicated Support Engineer – Public Key Infrastructure (PKI) to join our team. The ideal candidate will have experience managing PKI environments, supporting Microsoft Active Directory Certificate Services (AD CS), and troubleshooting certificate-related issues. This role involves supporting enterprise PKI solutions, SSL/TLS certificates, and key management processes to ensure secure digital communications.

Key Responsibilities

  • Support and maintain Public Key Infrastructure (PKI) environments.

  • Administer and troubleshoot Microsoft Active Directory Certificate Services (AD CS).

  • Manage the lifecycle of digital certificates, including issuance, renewal, revocation, and replacement.

  • Configure and support SSL/TLS certificates for servers, applications, and network devices.

  • Assist in key management and certificate lifecycle management activities.

  • Troubleshoot certificate authentication, encryption, and trust-related issues.

  • Maintain PKI documentation, procedures, and operational records.

  • Work closely with infrastructure, security, and application teams to ensure secure certificate deployment.

Requirements

  • Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or another UGC approved related degree.

  • 1-2 years of experience in managing Microsoft Active Directory environments with Microsoft Active Directory Certificate Services (AD CS).

  • Good understanding of Public Key Infrastructure (PKI) concepts and key management.

  • Strong knowledge of SSL/TLS protocols, certificate chains, and digital certificates.

  • Experience troubleshooting certificate-related issues in enterprise environments.

  • Good analytical, troubleshooting, and communication skills.

Preferred Qualifications

  • Microsoft certifications related to Active Directory or Windows Server administration (e.g., Windows Server Hybrid Administrator, Active Directory-related certifications).

  • Experience with Hardware Security Modules (HSMs) or enterprise certificate management solutions.

  • Knowledge of certificate automation protocols such as ACME or SCEP.

  • Familiarity with Windows Server administration and PowerShell scripting.

What We Offer

  • Opportunity to work with enterprise PKI and certificate management solutions.

  • Exposure to modern identity and security technologies.

  • Continuous learning and professional development opportunities.

  • A collaborative and supportive work environment.

  • Competitive remuneration and career growth opportunities

Application Instructions:

Please email your CV to [email protected] with the subject line: DevSecOps Engineer – Intern <Your Name>
  • (Example: DevSecOps Engineer – Intern Sachith Fernando)