Active Directory PKI Customer Engineer

Looking for an Active Directory PKI Customer Engineer who is obsessed with customer satisfaction, comfortable hosting workshops and trainings with premiere level clients, driving solutions with Microsoft customers, and ready to learn!

 Only W2

USA Resident/USA Citizen Required

The role requires deep knowledge (300-400 level) in the following technology areas: PKI and Active Directory

• Active Directory Certificate Services: Strong understanding of cryptographic algorithms and protocols

• Experience working with certificate authorities and registration authorities such as NDES and CEP/CES

• Proficiency in key management and renewal

• Experience designing, implementing, and maintaining secure PKI solutions in large scale enterprise environments (two and three tier PKI hierarchies (>1 issuer) 

• Knowledge of integrating PKI with other security technologies such as HSMs, TLS inspection, 802.1x, etc...

• Experience conducting PKI audits and monitoring

• Ability to troubleshoot and resolve issues related to certificate issuance and management

• Knowledge of best practices for securing device and user certificates

• Experience configuring Intune to work with a certificate authority to issue device and user certificates

• Expertise in certificate lifecycle management

• Expertise with autoenroll and manual certificate issuance

• Knowledge of certificate templates and their configuration

• Experience with scripted installations

• Expertise with database cleanup options & PKI domain maintenance

• Cross-forest implementations (Desired)

• Active Directory Domain Services:

• Active Directory replication

• Active Directory troubleshooting

• Group Policy implementation, design, and troubleshooting

• Fundamental networking knowledge – IP, DHCP, DNS, WINS, routing etc.

• The following areas may also be beneficial:

• Active Directory Scripting

• Active Directory Disaster Recovery

• Active Directory Monitoring Tools

• Azure AD Connect Azure Active Directory