Insight Global is seeking a skilled PKI Engineer/Analyst to join one of our medical device clients in the Minneapolis or Boston area. This person will design, implement, and manage their Public Key Infrastructure (PKI) systems, ensuring secure authentication, encryption, and digital trust across their organization. The ideal candidate will have expertise in certificate management, cryptography, and PKI best practices, with hands-on experience in DigiCert, AWS Certificate Manager, and Azure Key Vault. Key responsibilities include conducting a comprehensive assessment of their existing certificate infrastructure to identify gaps, inefficiencies, and security risks, and providing detailed observations and strategic recommendations to leadership on certificate lifecycle management, policy improvements, and security enhancements. The role involves deploying, managing, and maintaining PKI solutions, including internal and external CAs and RAs, administering DigiCert lifecycle management, managing AWS Certificate Manager, and overseeing Azure Key Vault for key storage and encryption. Additionally, the PKI Engineer/Analyst will ensure compliance with industry standards (FIPS, NIST, ISO 27001) and security best practices, troubleshoot and resolve PKI-related issues across cloud and on-premises environments, and collaborate with security teams to enhance authentication mechanisms and encryption policies.
This role requires hybrid schedule in Arden Hills, MN OR Marlborough, MA.
We are a company committed to creating inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity employer that believes everyone matters. Qualified candidates will receive consideration for employment opportunities without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, disability, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to
Human Resources Request Form. The EEOC "Know Your Rights" Poster is available
here.
To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:
https://insightglobal.com/workforce-privacy-policy/ .
-Hands-on experience with MS Internal CA, DigiCert, AWS Certificate Manager, and Azure Key Vault for certificate and key management.
-Strong knowledge of SSL/TLS, X.509 certificates, cryptographic algorithms, and encryption protocols.
-Expertise in Microsoft Active Directory Certificate Services (ADCS), Entrust, Venafi, and other PKI platforms.
-Familiarity with cloud security best practices and hybrid PKI deployments.
-Strong troubleshooting, scripting (PowerShell/Python/etc.), and automation skills.
Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.