PKI Engineer

PKI Engineer

Location: Charlotte, NC / Denver, CO

Work Arrangement: Hybrid

Client Industry: Banking

Duration: 12-18 Months (Possibility of Full-Time Conversion)

Must-haves

• Enterprise PKI design/operations: AD CS, CRLs/OCSP, certificate lifecycle, key archival/recovery, CA hierarchy.
• Automation: PowerShell (advanced), desired: Python/Go; API-first mindset.
• Windows: AD/ADCS, GPOs for auto-enrollment, Schannel/TLS hardening, Windows server cert deployment.
• Middleware: IIS, Nginx/Apache reverse proxy TLS, Java Keystores (JKS/PKCS12), HSM basics (Thales/SafeNet/etc.).
• Security controls: mTLS patterns, cipher suites, cert pinning pros/cons, rotation policies, compliance basics.

Nice-to-haves

• Cloud CA exposure: AWS PCA, Azure Key Vault + Managed HSM, GCP CA Service, ACME workflows (e.g., cert-manager).

Compensation:

Hourly Rate: $70 – $75 per hour

This range reflects base compensation and may vary based on location, market conditions, experience, and candidate qualifications.

Benefits:

The Company offers the following benefits for this position, subject to applicable eligibility requirements: medical insurance, dental insurance, vision insurance, 401(k) retirement plan, life insurance, long-term disability insurance, short-term disability insurance, paid parking/public transportation, (paid time, paid sick and safe time, hours of paid vacation time, weeks of paid parental leave, paid holidays annually - AS Applicable)

About Us

At Collabera, we don't just offer jobs—we build careers. As a global leader in talent solutions, we provide opportunities to work with top organizations, cutting-edge technologies, and dynamic teams. Our culture thrives on innovation, collaboration, and a commitment to excellence. With continuous learning, career growth, and a people-first approach, we empower you to achieve your full potential. Join us and be part of a company that values passion, integrity, and making an impact.