Certificate Management and PKI Engineer

Certificate Management and PKI Engineer

Requirements

• Minimum of 3 years of experience in certificate management, PKI, or related fields.
• Proven experience in automating certificate management processes using tools like HashiCorp Vault, Venafi, or similar.
• Strong understanding of cryptographic protocols (SSL/ TLS), certificate authorities, and digital signatures.
• Experience with scripting and automation using languages such as Python, PowerShell, or Bash.
• Familiarity with DevOps practices and automation tools – Ansible, Terraform, Jenkins.

Responsibilities

• Develop and deploy automated processes for the issuance, renewal, revocation, and monitoring of digital certificates across various platforms.
• Collaborate with cross-functional teams to integrate certificate management solutions into existing infrastructure, including cloud, on-premises, and hybrid environments.
• Implement and maintain automations scripts and tools using platforms such as Hashicorp Vault, Venafi, or similar certificate management systems.
• Monitor and manage the health of digital certificates to prevent expirations and ensure compliance with security policies.
• Troubleshoot and resolve issues related to certificate management, including SSL/ TLS configurations, certificate chains, and trust stores.
• Create and maintain comprehensive documentation for automated certificate management processes, configurations, and best practices.
• Stay updated with latest trends in PKI, cryptography, and security automation to continuously improve the organization’s certificate management strategy.
• Work closely with security and compliance teams to ensure that all certificate management practices meet regulatory and internal security requirements.
• Lead incident response efforts related to certificate management issues, ensuring minimal disruptions to the services.
• Lead the design, implementation, and maintenance of automated certificate management solutions to support the organization’s security infrastructure.
• Oversee the lifecycle management of digital certificates, ensuring time.
• Complex troubleshooting, Root cause analysis, performance tuning, Tuning, diagnostics, and maintenance of IT security related Equipment.
• Ensuring adherence to process.
• Following the SLA’s and procedures already defined for security device management.
• Procedures and KB, known incident resolution, Known Error handling.
• Hands on experience and ability to do Root cause analysis, Problem & Capacity Management.
• As an active member of the team, monitor and process response for security events on a 24×7 basis.

Preferred Qualifications

• Relevant certifications (e.g. CISSP, CEH, Cloud – Azure, GCP, AWS) are a plus.
• Experience documenting business processes or technical procedures preferred.