PKI Certificate Engineer

Job Summary

A company is looking for a PKI / TLS Certificate Engineer to support operations and automation in enterprise certificate lifecycle management.

Key Responsibilities

• Support day-to-day operations for certificate lifecycle management, focusing on reducing manual handling and preventing expiration risks
• Develop and maintain automation to expand certificate coverage and reduce manual renewal efforts, particularly in Kubernetes environments
• Enhance operational improvements for CyberArk Certificate Manager and support cloud/Kubernetes certificate management approaches

Required Qualifications

• Experience with X.509 lifecycle management (issuance, renewal, replacement, decommission)
• Understanding of PKI fundamentals (CAs, chains, key usage, SANs, revocation)
• Advanced PowerShell scripting skills for automation and secure credential handling
• DevOps mindset with experience in production support and operational handoffs
• Able to collaborate cross-functionally with security, infrastructure, and platform teams