About the job
Summary
The Microsoft Identity Architect / PKI plays a pivotal role in shaping and executing enterprise-wide identity and Public Key Infrastructure (PKI) modernization projects. This position is responsible for ensuring the security and scalability of certificate lifecycle management. The ideal candidate will utilize their extensive knowledge of Microsoft Entra, Hybrid Join, and KeyFactor technologies to design and automate identity and cryptographic solutions within multifaceted environments. Additionally, this role will provide technical guidance to advance PKI strategies, focusing on Hardware Security Module (HSM) integration and readiness for Post-Quantum Cryptography.
Responsibilities
- Hands-on experience with enterprise PKI modernization: Lead initiatives within large-scale environments to enhance PKI frameworks.
- Proficient with KeyFactor: Expertise in using KeyFactor and KeyFactor Command for automating certificate lifecycle processes.
- Knowledge of Microsoft Entra: Strong understanding of Microsoft Entra and Hybrid Join functionalities in identity ecosystems.
- Experience with HSMs: Practical knowledge of on-premises HSMs, Certificate Authority (CA) and Registration Authority (RA) processes, as well as Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP) operations.
- Awareness of PQC: Understanding Post-Quantum Cryptography and its implications for PKI modernization strategies.
Qualifications
- Experience: Minimum of 2+ years in supporting or delivering enterprise PKI solutions.
- KeyFactor Technologies: Proven ability to work effectively with KeyFactor technologies and automate certificate management at scale.
- Microsoft Identity Platforms: Strong expertise in platforms, including Entra, Hybrid Join, Conditional Access, and passwordless authentication.
- Technical Leadership: Demonstrated experience in providing architectural guidance and technical leadership in client-facing engagements.
- Modernization Initiatives: Capable of contributing to initiatives involving HSM analysis, KeyFactor migration, and developing a PQC roadmap.
Location
This role is remote, with a required orientation during the first week onsite in Atlanta, Baltimore, or Washington DC.
To be considered, candidates must reside in one of the following U. S. states: GA, MD, ...

