ICA Engineer
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
Position type: Contract
Duration: 12 to 18 months
Location: 5 days onsite in Denver, Chicago, Washington DC - this role is onsite 5 days a week.
As an ICA Security Engineer, you will:
Top Skills:
- 5+ years of experience on Active Directory Certificate Services and enterprise Active Directory with managing CA infra
- 2+ years of experience on PowerShell
- Deep knowledge of X.509, CRL/OCSP, EKU/KU, SANs, key algorithms and sizes (RSA/ECC), hashing (SHA-2), and certificate validation paths.
Job Title: ICA Security Engineer
Location: Jersey City, NJ
Duration: 12 months to 18 months
Description-
Senior PKI Engineer to design, implement, and operate enterprise-grade Public Key Infrastructure (PKI) services with a strong focus on Microsoft Active Directory Certificate Services (AD CS) and Active Directory (AD) integration. Handson implementation and integration knowledge of certificate lifecycle management, CA hierarchy governance, enrollment automation, HSM-backed key protection, CA backup restore, migration and integration with platforms such as Windows Server, Linux, network/security devices, cloud providers, MDM/EPP, and zero-trust tooling. Subject matter expert for cryptographic standards, certificate-based authentication, and PKI security controls across the organization.
Key Responsibilities
Architecture & Design:
• Design and maintain enterprise PKI architectures (Root CA, Policy CA, Issuing CA) with offline/air gapped roots, secure key ceremonies, key usage, and issuance workflows and robust CRL/OCSP distribution.
• Integrate PKI with Active Directory (incl. AD forests/domains, AD CS, AIA/CDP locations, GPOs), and Azure AD/Entra ID where applicable (e.g., certificate-based auth).
• Engineer solutions for mutual TLS, 802.1X (wired/wireless/VPN), device identity, code signing, S/MIME, BitLocker, and disk/volume encryption certs.
• Key sizes, algorithms (RSA, ECC and PQC) encryption and hashing.
• Implement HSM-backed key storage for CAs and code signing; lead key ceremonies, disaster recovery designs.
Operations & Automation:
• Own certificate lifecycle management (issuance, renewal, revocation) including automation via Intune, GPO/Autoenrollment, SCEP/NDES, ACME, or MDM connectors.
• Manage CRL/OCSP publication, monitoring, and availability, design highly available, geo-distributed revocation endpoints.
• Implement scripting/automation (PowerShell, APIs) for bulk issuance, inventory, renewal, and drift detection. Enabling separation of duties for secure operation of PKI infrastructure
• CA backup, restore renewal and migration strategy
Security & Compliance:
• Apply strong key management practices (FIPS 140-2/140-3), certificate assurance levels, and secure CA hardening baselines.
• Regularly perform PKI risk assessments, access reviews, and control testing (e.g., template permissions, EKU misuse, issuance constraints).
• Lead root cause analysis and incident response for certificate/PKI-related outages or security events.
• Maintain alignment with NIST, CAB Forum, Microsoft Security Baselines, and internal compliance frameworks (e.g., SOX, PCI, HIPAA, ISO 27001) as applicable.
Minimum Qualifications:
• 8+ years in Security Engineering/Identity Infrastructure, including 5+ years hands-on with Microsoft AD CS and enterprise Active Directory with managing CA infra
• Proven experience designing, deploying, and operating multi-tier Microsoft PKI (offline root, issuing CAs) in large/complex environments.
• Deep knowledge of X.509, CRL/OCSP, EKU/KU, SANs, key algorithms and sizes (RSA/ECC), hashing (SHA-2), and certificate validation paths.
• St
-
Product Engineer Body
1 day ago
Chicago, IL, United States Kyyba Full-timeJob-ID Reference A Plant Vehicle Team Engineer has several responsibilities associated with analyzing and improving the Quality of the vehicles. Some tasks include: - Review incoming warranty claims data on a daily basis, review customer and dealership comments, bin claims into proper binning categories, contact dealership/s for parts and repair diagnoses,...
-
Chicago, IL, United States LER TechForce Full-timeLER TechForce seeks an experienced Quality Engineer to support vehicle quality initiatives at an automotive assembly plant in Chicago. You will analyze warranty data, perform root-cause investigations, and drive ICA/PCA actions with cross-functional teams.The role requires hands-on OEM plant experience, strong Excel warranty analysis, and CAD navigation...
-
Corporate Partnerships
1 week ago
Chicago, IL, IL, United States Illinois Conservatory for the Arts Remote Full-timeICA is seeking a **Corporate Partnerships & Events Associate** to cultivate and secure corporate sponsorships for A Night of Broadway — our annual black-tie benefit gala featuring Broadway headliners and a full orchestra — and other ICA fundraising events throughout the year. This is a part-time, hybrid role built for an experienced nonprofit...
-
Engineering Manager: Lead Automation
2 weeks ago
North Chicago, IL, United States Procter & Gamble Full-timeProcter & Gamble seeks an Engineering Manager to lead cross‑functional teams across ICA, APS, MPD, and packaging engineering. You will drive advanced manufacturing capabilities, automation, and data analytics to optimize production and product quality.The role offers exposure to cutting‑edge technology, leadership opportunities, and relocation/support...
-
Engineering Manager
2 weeks ago
North Chicago, IL, United States Procter & Gamble Full-timeAbout P&G and Our Engineering Sites: P&G is a global leader in consumer goods, committed to innovation impacting 5 billion consumers daily. Our Product Supply (PS) team - of which includes our Engineering (ENG) experts - drives our creation process, offering a rewarding career path to build expertise and grow as a leader. These ENG roles are primarily...
-
Remote Sr COBOL Programmer
7 days ago
chicago, illinois, United States External Ost Careers Full-timeOptimal Solutions & Technologies (OST, Inc.) is focused on excellence. We specialize in providing Management Consulting, Information Technology, and Research Development and Engineering services. The fundamental distinction of the OST team is its business knowledge in both the public and private sectors. We serve the aerospace & transportation,...
-
Engineering Manager
3 weeks ago
North Chicago, Illinois, United States Procter & Gamble Full-time $85,000 - $122,200 ContractJob Location BOSTON GO & TECH CENTER Job Description About P&G and Our Engineering Sites: P&G is a global leader in consumer goods, committed to innovation impacting 5 billion consumers daily. Our Product Supply (PS) team - of which includes our Engineering (ENG) experts - drives our creation process, offering a rewarding career path to build expertise and...
-
Engineering Internship, Summer 2027
4 weeks ago
North Chicago, Illinois, United States Procter & Gamble Full-time $85,000 - $122,200 ContractJob Location BOSTON GO & TECH CENTER Job Description About P&G and Our Engineering Sites: P&G is a global leader in consumer goods, committed to innovation impacting 5 billion consumers daily. Our Product Supply (PS) team - of which includes our Engineering (ENG) experts - drives our creation process, offering a rewarding career path to build expertise...
