Southwest Research Institute (SwRI)

LEAD IT SPECIALIST - SR. IT SPECIALIST - Cloud Identity, PKI, and AI Specialist

Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in Information Technology or related field, or 10 years of relevant experience with certifications.
  • Preferred Microsoft certifications for enhanced credibility.
  • 6 years of hands-on experience with enterprise identity platforms, including Active Directory and ADFS.
  • 3 years managing a PKI environment and certificate lifecycle processes.
  • Proven experience with secure access design for Azure and/or AWS solutions, specifically leveraging AI services.
  • Strong grasp of identity management best practices like RBAC, least-privilege access, MFA, and operational governance.
  • Valid driver's license required.

Responsibilities

  • Manage and improve internal PKI, ADFS, and certificate lifecycle management.
  • Design secure identity access for Azure and AWS services, focusing on AI integrations.
  • Lead app registration and access control systems with Entra ID and RBAC.
  • Collaborate with IT teams to troubleshoot complex authentication issues.
  • Promote best practices for identity management and cloud infrastructure governance.
  • Ensure thorough documentation and change control processes are followed.
  • Research and propose advancements in identity management and automation.

Benefits

  • Emphasis on professional development through certifications.
  • Opportunities for cross-team collaboration and knowledge sharing.
  • Focus on adopting best practices for cloud identity management.
  • Engagement with cutting-edge technologies in Azure and AI.
  • Strong change control and documentation culture.
Full Job Description
  • Manage and enhance internal Public Key Infrastructure (PKI), ADFS (Active Directory Federation Services), and Certificate Lifecycle Management (e.g. Keyfactor Command) to maintain secure, reliable access to enterprise resources.
  • Design and implement secure identity and access patterns for Azure and AWS services, including Azure OpenAI, Azure AI Hub/Foundry, Azure Cognitive Services, and AWS Bedrock.
  • Lead the design, configuration, and maintenance of Entra ID (Azure AD) app registrations, service principals, and RBAC models that provide controlled, auditable access to cloud and AI workloads.
  • Collaborate across IT teams (Cloud, Security, Networking, Applications, Help Desk) to resolve complex issues related to AD, Entra ID, ADFS, PKI, certificates, and cloud identity.
  • Drive best practices for identity and access management, Azure and AWS infrastructure governance, and operational scalability across cloud and on-premises environments.
  • Maintain strong change control discipline and keep supporting documentation up to date.

  • Manage and support internal PKI and certificate lifecycle processes, including: Administration of CAs, OCSP/CRL endpoints, and certificate trust chains.
  • Configuration and operation of Keyfactor Command certificate discovery, issuance, renewal, and revocation.
  • Support and maintain identity and federation services, including Active Directory (user and group management, roles, delegation), Entra ID app registrations, service principals, Conditional Access, RBAC, ADFS configuration and integration with internal and external applications.
  • Collaborate with IT teams to resolve helpdesk tickets related to: AD and Entra ID authentication and authorization issues.
  • ADFS sign-on/federation problems and claims troubleshooting.
  • Certificate deployment, trust, and lifecycle problems impacting applications and services.
  • Implement and maintain secure access for Azure and AWS AI platforms, including: App registrations and security group-based access controls for Azure OpenAI, Azure AI Hub/Foundry, and Azure Cognitive Services.
  • IAM roles, policies, and network/security configuration for AWS service.
  • Maintain documentation of identity architectures, PKI designs, AI enablement patterns, and change records for audits and future engineers, and research and propose improvements to identity, PKI, certificate lifecycle, and AI enablement, including automation and governance tooling.

  • Requires a Bachelors degree in Information Technology or related degree field with relevant experience. In lieu of a Bachelors degree, 10 years of professional level experience, a high school education or equivalent with related certifications will be considered.
  • Related Microsoft certifications are preferred.
  • 6 years: Hands-on experience managing enterprise identity platforms, including: Active Directory domain services. Entra ID (Azure AD) app registrations, service principals, and Conditional Access. ADFS design, configuration, and support.
  • 3 years: Managing a PKI environment and certificate lifecycle, including: Internal CA infrastructure, OCSP/CRL, and certificate templates.
  • Demonstrated experience designing and securing access for Azure and/or AWS solutions, including at least some of the following: Azure OpenAI, Azure AI Hub/Foundry, Azure Cognitive Services. AWS Bedrock or similar AWS AI/ML services.
  • Strong understanding of identity and access management best practices, including: Role-based access control (RBAC) in Azure and AWS. Least-privilege design, MFA, and Conditional Access. Governance and operational scalability in cloud environments.
  • A valid/clear driver's license is required.

About Southwest Research Institute (SwRI)

Southwest Research Institute (SwRI) is a non-profit research and development organization headquartered in San Antonio, Texas. The institute was founded in 1947 and has since grown to employ over 3,000 people across multiple locations in the United States. SwRI provides research and development services to a variety of industries, including automotive, aerospace, and energy. The institute's research areas include automation and data systems, chemistry and chemical engineering, and space science and engineering. SwRI has a long history of working with government agencies, including NASA and the Department of Defense, as well as private companies.
Learn more about Southwest Research Institute (SwRI)
Size
3,000 employees
Industry

Similar Jobs

More Jobs at Southwest Research Institute (SwRI)

More Information Technology Jobs

Find similar LEAD IT SPECIALIST - SR. IT SPECIALIST - Cloud Identity, PKI, and AI Specialist jobs: