PKI Certificate Engineer

Job Summary

A company is looking for a PKI / TLS Certificate Engineer to support operations and automation in enterprise certificate lifecycle management.

Key Responsibilities

• Support operational execution for certificate lifecycle tasks, focusing on reducing manual handling and preventing expiration risks
• Develop and maintain automation to enhance certificate coverage and reduce manual renewal efforts, particularly in Kubernetes environments
• Support and improve automation and operational processes for certificate management tools within the CME ecosystem

Required Qualifications

• Experience with X.509 lifecycle management (issuance, renewal, replacement, decommission)
• Fundamentals of PKI (CAs, chains, key usage, SANs, revocation)
• Advanced PowerShell scripting for automation and error handling
• Production support experience with a DevOps/automation mindset
• Ability to collaborate with security, infrastructure, and platform teams