Hands-on PKI implementation experience
Experience in Root CA and Subordinate/Issuing CA setup
Certificate Lifecycle Management (CLM)
Certificate issuance, renewal, revocation, and management
HSM integration and management
PKI migration, upgrade, or deployment projects
Knowledge of CRL, OCSP, PKCS, and X.509 certificates
Scripting exposure (PowerShell/Python/Bash) preferred
Experience with Keyfactor, Venafi, DigiCert, Entrust, Microsoft CA or similar PKI platforms
Candidates should have worked on implementation/engineering activities, not just operations/support
PQC (Post-Quantum Cryptography) experience is highly preferred