{"id":2069061,"url":"https://alion.io/job/it-labs-senior-pki-engineer","title":"Senior PKI Engineer","company":{"id":3818753,"name":"IT Labs","domain":"itlabs.io","url":"https://alion.io/company/aiti-labs","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":76000,"max_usd":154000,"period":"year","method":"global_role_seniority_cell","sample_n":6708},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"PKI","optional":false},{"name":"Windows","optional":false},{"name":"Crowdstrike","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"PowerShell","optional":true},{"name":"Qualys Cloud Platform","optional":true},{"name":"Tanium","optional":true},{"name":"VPN","optional":true}],"status":"live","first_seen_at":"2026-10-08T03:59:08Z","employer_posted_date":null,"last_verified_at":"2026-10-08T03:59:08Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"IT Labs is looking for a Senior PKI Engineer to support a U.S.-based client with the implementation and operationalization of certificate-based device authentication across a secure Windows endpoint environment.\nThe client already has an existing PKI environment. The focus of this role is therefore not to build an enterprise PKI from scratch, but to integrate and manage machine certificate authentication across Windows endpoints, Microsoft Intune, and Palo Alto GlobalProtect / Prisma Access.\nThe engineer will help ensure that corporate laptops can securely authenticate before user login, maintain reliable certificate lifecycle processes, and support a secure transition from device identity to authenticated user identity.\nWhat You'll Do\nImplement and support machine certificate-based authentication for Windows endpoints.\n\nIntegrate an existing enterprise PKI environment with Palo Alto GlobalProtect Pre-Logon.\n\nSupport secure device authentication before Windows user login.\n\nConfigure and troubleshoot certificate enrollment, renewal, expiration, and revocation.\n\nWork with Microsoft Intune, Active Directory, and Windows endpoint management.\n\nEnsure certificates and private keys are securely stored and protected, including TPM-backed key scenarios where applicable.\n\nSupport CRL and OCSP validation and certificate revocation processes.\n\nConfigure and troubleshoot GlobalProtect certificate authentication and pre-logon connectivity.\n\nSupport the transition from machine/device identity to authenticated user identity.\n\nWork with network and security teams on Prisma Access, firewall policies, and secure endpoint connectivity.\n\nTroubleshoot certificate, authentication, and connectivity issues across endpoints.\n\nSupport resilience and failover scenarios across GlobalProtect / Prisma Access gateways.\n\nDocument technical configurations, operational processes, and troubleshooting procedures.\n\nCollaborate with endpoint, networking, identity, and security teams.\n\nWhat We're Looking For\nStrong hands-on experience with Public Key Infrastructure (PKI) in enterprise environments.\n\nStrong knowledge of Microsoft AD CS / Certificate Services or comparable enterprise PKI solutions.\n\nExperience with:\n\nMachine/device certificates\n\nCertificate enrollment and auto-enrollment\n\nCertificate lifecycle management\n\nCertificate renewal and revocation\n\nCRL / OCSP\n\nX.509 certificates\n\nPrivate key management\n\nStrong experience with Windows enterprise environments.\n\nExperience with Active Directory.\n\nExperience with Microsoft Intune or another enterprise endpoint management platform.\n\nStrong troubleshooting skills across certificates, authentication, endpoint configuration, and network connectivity.\n\nExperience working in security-conscious enterprise environments.\n\nNice to Have\nExperience with Palo Alto GlobalProtect.\n\nExperience with Prisma Access.\n\nExperience implementing GlobalProtect Pre-Logon.\n\nExperience with certificate-based VPN authentication.\n\nUnderstanding of Always-On VPN / Always-On GlobalProtect architectures.\n\nExperience with TPM-backed certificates and hardware-protected private keys.\n\nExperience with Microsoft Entra ID.\n\nExperience with endpoint security tooling such as:\n\nCrowdStrike\n\nMicrosoft Defender\n\nTanium\n\nQualys\n\nPowerShell scripting experience.\n\nExperience working in regulated or high-security environments.\n\nWorking Conditions\nRemote position, open only to candidates based in the United States.\n\nU.S. citizenship is required for this engagement.\n\nEngagement is offered on an Individual Contractor or B2B contract basis.\n\nPaid Time Off (PTO) is included as part of the engagement.\n\nFull-time commitment, working in alignment with the client's business hours and project needs.\n\nOur valuesWe are a company that seeks the best for both our employees and clients, reaching beyond expectations in turning dreams into reality. Our way of working is rooted in our core values (Integrity, Excellence, Proactivity, Innovation, and People), with an expectation that our future colleagues will make these their second nature in their everyday work and life. We don’t ask for perfection, but we do appreciate people motivated to better themselves in every conceivable aspect.\nAbout IT Labs\nFounded in 2005, IT Labs is an international software tech company, specializing in purpose and process-driven teams for high-performance, innovation, transformation, and efficiency. Our HQ is in Palm Beach Gardens, Florida, and we have teams around the world - the UK, the Netherlands, Brazil, Argentina, Serbia, Croatia, BIH, Montenegro, North Macedonia, and the Middle East. We are constantly growing, and we would love for you to become part of our team!\nOriginally posted on Himalayas","description_format":"text","description_chars":4716,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevOps & Platform Engineering"],"lifecycle":[{"event":"open","at":"2026-10-08T05:28:15Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":0.945,"age_days":4,"expected_fill_days":7,"reasons":["seen:4","win:mid"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/it-labs-senior-pki-engineer","json_url":"https://alion.io/job/it-labs-senior-pki-engineer.json","meta":{"generated_at":"2026-10-12T18:33:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30047,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3818753},"rest":"https://alion.io/mcp/rest/get_company?id=3818753"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fit-labs-senior-pki-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fit-labs-senior-pki-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fit-labs-senior-pki-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/it-labs-senior-pki-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fit-labs-senior-pki-engineer"}]}