Security Engineer - Active Directory and PKI

Who We Are

Applied Materials is a global leader in materials engineering solutions used to produce virtually every new chip and advanced display in the world. We design, build and service cutting‑edge equipment that helps our customers manufacture display and semiconductor chips – the brains of devices we use every day. As the foundation of the global electronics industry, Applied enables the exciting technologies that literally connect our world – like AI and IoT.

If you want to push the boundaries of materials science and engineering to create next generation technology, join us to deliver material innovation that changes the world.

Salary: $ – $

Location:

Austin, TX;
Toronto, CAN

You’ll benefit from a supportive work culture that encourages you to learn, develop, and grow your career as you take on challenges and drive innovative solutions for our customers. We empower our team to push the boundaries of what is possible—while learning every day in a supportive leading global company. Visit our Careers website to learn more. At Applied Materials, we care about the health and wellbeing of our employees.

We’re committed to providing programs and support that encourage personal and professional growth and care for you at work, at home, or wherever you may go. Learn more about our benefits.

• Design and implement scalable, secure Active Directory (AD) and LDAP directory services for global enterprise environments.
• Integrate AD/LDAP and PKI with cloud identity platforms such as Azure AD, AWS IAM, and MFA solutions (e.g security key, passkey etc.).
• Perform regular maintenance, health checks, and performance tuning of AD, LDAP, and PKI systems.
• Ensure high availability and disaster recovery readiness for identity infrastructure.
• Troubleshoot complex issues including replication, authentication failures, and certificate errors.
• Architect and manage internal PKI infrastructure including CA, RA, CRL, OCSP, and HSM integrations.
• Define trust strategies and governance models for Certification Authorities (CAs).
• Develop and maintain Certificate Policy and Certificate Practice Statements (CP/CPS).
• Deploy and operate enterprise‑grade PKI solutions including Microsoft ADCS and third‑party platforms (e.g., Digi Cert, Keyfactor, Venafi).
• Implement certificate lifecycle management (CLM) processes including issuance, renewal, revocation, and automation.
• Support application integrations for TLS/SSL, S/MIME, 802.1x, Smart cards, and Code Signing.
• Ensure secure key creation, storage, and usage aligned with cryptographic standards and compliance requirements.
• Develop automation scripts using Power Shell, Python, or Ansible for identity and certificate operations.
• Integrate PKI and credential management into CI/CD pipelines and Dev Sec Ops  workflows.
• Understanding of IAM solutions including SSO, MFA, and role‑based access control.
• Work with federation protocols (SAML, OAuth, OpenID Connect) and tools like ADFS, Keycloak, Ping Federate.
• Align identity and certificate services with ISO 27001, SOC 2, NIST, and GDPR frameworks.
• Support internal and external audits with documentation, logs, and remediation plans.
• Track and report service metrics, SLAs, KPIs, and KRIs for operational excellence.
• Collaborate with global teams including IAM, Infrastructure, Security, and Application owners.
• Provide excellent customer service to users and internal stakeholders.
• Contribute to change management and documentation using ITSM tools.
• Mentor team members and lead cross‑functional technical initiatives.

• 5‑7 years of experience in enterprise IT infrastructure with specialization in AD, LDAP, and PKI.
• Strong understanding of AD core concepts: FSMO roles, OU structure, GPOs, replication, RODCs, schema, and security.
• Hands‑on experience with Microsoft ADCS and PKI components:
  Root CA, Issuing CA, OCSP, CRLs, SCEP/NDES.
• Experience with LDAP directories (OpenLDAP, Oracle Directory Services) and integration with enterprise systems.
• Proficiency in scripting (Power Shell, Python) and automation tools (Ansible, Terraform).
• Familiarity with certificate deployment across platforms:
  Windows, Linux/Unix, Apache,…