Microsoft ADCS Administrator - Associate Architect III

Responsibilities

• Administer and support Microsoft ADCS environments, including Enterprise/Standalone CAs, Subordinate CAs, and issuing CAs.
• Manage the full certificate lifecycle, including issuance, renewal, revocation, CRLs, OCSP, and key archival/recovery.
• Operate and troubleshoot certificate templates, auto-enrollment, enrollment agents, and Group Policy–based deployment.
• Maintain CA health and availability through monitoring, capacity planning, patching, and performance tuning.
• Manage and secure CA private keys, including HSM integration, key ceremonies, and backup/restore procedures.
• Integrate ADCS with enterprise platforms such as Windows authentication, IIS, VPN, Wi-Fi 802.1X, and Intune/MDM.
• Create automation for certificate operations using PowerShell and document operational runbooks.
• Provide Tier 3 support and root-cause analysis for certificate-related outages and authentication issues.

Requirements

• Approximately 5 years of experience administering Microsoft ADCS/PKI in an enterprise environment.
• Strong knowledge of X.509, certificate chains, SANs, EKUs, CRL/OCSP, and key usage.
• Proven experience with certificate templates, auto-enrollment, and GPO configuration.
• Proficiency with PowerShell for administration, reporting, and automation.
• Solid Windows Server administration skills, including patching, services, and troubleshooting.
• Bachelor’s degree or equivalent experience.

Preferred Qualifications

• Experience with NDES/SCEP, Intune certificate profiles, or JAMF integrations.
• Hands-on experience with HSMs (e.g., Thales, Entrust, Utimaco) and formal key ceremony procedures.
• Familiarity with PKI design patterns such as offline root CAs and HA/DR strategies.
• Experience with Azure/Entra ID adjacent identity services and hybrid identity environments.
• Exposure to security/compliance frameworks like NIST, ISO 27001, or SOC 2.

About the Company

Carelon Global Solutions is a healthcare solutions company dedicated to simplifying complex operational processes to improve the health of the healthcare system. As a subsidiary of Elevance Health, we bring together a global team of innovators to enable scalable, next-generation platforms and specialized digital tools that make healthcare operations more effective and efficient.