PKI Administrator

Piper Companies is seeking a PKI Administrator to join a large Hospital System Organization located in Philadelphia, PA for a 100% remote contract-to-hire role. The PKI Administrator will Manage the PKI environment for the Organization in their information security team. This team is growing so this is a brand new position for the organization!

Responsibilities of the PKI Administrator include:

• PKI Operations & Management
• Administer and maintain internal and external Certificate Authorities (CAs), including Microsoft ADCS, HSM-integrated PKI, and third-party/public CAs (e.g., DigiCert, Entrust, GlobalSign).
• Manage root and subordinate CA hierarchies, certificate templates, CRLs, AIA/CDP, and OCSP configurations
• Oversee certificate issuance, renewal, and revocation workflows across the organization.

Qualifications for the PKI Administrator include:

• 5+ years Experience in PKI administration or infrastructure security roles
• Understanding of cryptographic principles like: X.509 certificates, CAs, and key management lifecycle.
• Strong experience with Microsoft ADCS, OpenSSL, including hands-on experience with hardware security modules (e.g., Thales, nShield, Entrust).
• Experience with certificate lifecycle management platforms (e.g., Venafi, CyberArk, Keyfactor, AppViewX).
• Must have obtained a Bachelors Degree.

Compensation for the PKI Administrator include:

• Salary Range: $120,000-130,000
• Comprehensive Benefits: Cigna Medical, Dental, Vision, 401K, PTO, Sick Leave if required by law, and Holidays

This job opens for applications on 3/11/2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: PKI, Venafi, Administrator, Certificate Authorities, ADCS, HSM-integration, DigiCert, Entrust, GlobalSign, CRLs, AIA/CDP, OCSP, lifecycle management, automation, certificate enrollment, SCEP, ACME, Intune, audit logs, audit, security, compliance, cryptographic standards, NIST, PCI-DSS, PKI resilience, Infrastructure integration, IIS, NetScaler, F5, Azure/AWS/GCP workloads, VPNs, MDM solutions, network appliances, SL/TLS troubleshooting, code signing, email encryption/signing, smart cards, device authentication

#LI-SM2 #LI-remote