PKI Operations Expert – Keyfactor
About the assignment
A leading biotechnology organisation relies on Keyfactor PKI to underpin identity, device, application and cloud security across its enterprise. You will own day-to-day PKI operations—monitoring, patching, upgrades, and certificate lifecycle management—while executing live-platform migrations without business disruption.
This is a hands-on operations role, not project delivery. You keep the platform healthy, certificates valid, and CA services available every day. You also lead migrations such as AD CS replacements, CA re-keys, version upgrades, and moves to SaaS or cloud components.
Your responsibilities
- Run the Keyfactor environment daily: monitoring, health checks, patching, upgrades and capacity management
- Manage certificate discovery, inventory, issuance, renewal and revocation to prevent outages from expired or misconfigured certificates
- Operate CA infrastructure including hierarchy, templates, profiles, CRL/OCSP availability and HSM-backed key protection
- Maintain orchestrators and integrations with servers, load balancers, cloud key vaults, device management and DevOps tools
- Execute live-platform migrations: AD CS to Keyfactor, CA re-keys, hierarchy changes and SaaS transitions
- Automate manual certificate processes via ACME, SCEP, EST and Windows auto-enrollment
- Serve as second and third line support for PKI incidents, problems and service requests
- Plan cutovers, coexistence and rollback scenarios aligned with application and infrastructure teams
Tech Stack & Tools
Platforms & Tooling
Frameworks & Standards
Cloud & Infrastructure
Methodologies
Certifications (preferred)
Must-haves
- 5+ years hands-on enterprise PKI experience, including several years operating Keyfactor in production
- Proven operations track record running and maintaining live PKI platforms
- At least one production PKI migration executed hands-on
- Deep knowledge of Microsoft AD CS, Active Directory and certificate auto-enrollment
- Strong understanding of X.509, certificate chains, CRL, OCSP, TLS and key management
- PowerShell and REST API automation skills
Nice-to-haves
- HSM experience (Thales Luna, Entrust nShield)
- Azure Key Vault, Entra ID, Intune and NDES expertise
- cert-manager and Kubernetes certificate automation
- Experience in regulated environments (life sciences, GxP, financial services)
What we offer
- Ownership of a security platform the entire business depends on
- Lead real migrations and automation initiatives, not just operational maintenance
- International setting: collaborate with Dutch and Danish teams in a science-driven organisation
- Hybrid work: based in Utrecht or Copenhagen with on-site days per week
- Personal guidance from a dedicated MVPeople consultant who knows your niche
The process
Introduction
Phone call with your MVPeople consultant (within 24 hours)
Match & Brief
We discuss the assignment in detail and prepare you
Client meeting
Introduction to the client
Start
Contracting and onboarding
Details
Type
Freelance / ZZP (MVPeople)
Location
Utrecht
Work model
Hybrid
Level
Senior
Industry
farma
Rate
€100 per hour
Posted
6 November 2026
Job ID
59877
Contact
MVPeople Group
cv@mvpeoplegroup.com