PKI & Certificate Lifecycle Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Administer and provide support for DigiCert TLM and associated PKI services.

• Oversee the entire lifecycle of certificate requests, including issuance, renewal, revocation, inventory management, monitoring, and retirement.

• Aid users and technology teams in managing public TLS, private TLS, S/MIME, code-signing, VPN/Wi-Fi, endpoint, server, application, and machine identity certificates.

• Diagnose and resolve issues related to certificate lifecycle, trust, and deployment.

• Collaborate with teams across networking, applications, cloud, endpoints, and infrastructure.

• Collect requirements and facilitate the onboarding of certificates.

• Provide support for integrations and troubleshoot service-related issues.

• Create scripts, reports, and workflows to enhance certificate inventory, monitoring, renewal, notification, and operational efficiency.

• Contribute to enhancements of services and the overall capabilities of PKI.

• Adhere to PKI governance and security standards.

• Maintain up-to-date operational documentation.

• Assist with incident and problem management efforts.

• Appropriately escalate risks and issues when necessary.

• Collaborate with distributed technology teams worldwide.

⛳️ Requirements

• Minimum of 3 years of experience in PKI, certificate management, cybersecurity, infrastructure engineering, or a related technical field.

• In-depth understanding of X.509 certificates, certificate authorities, certificate chains, public/private keys, and SSL/TLS protocols.

• Experience with enterprise PKI, managed PKI, or certificate lifecycle management platforms.

• Proficient in troubleshooting issues related to certificate enrollment, renewal, trust, installation, and configuration.

• Basic scripting or automation skills using Python, PowerShell, Bash, or similar technologies.

• Familiarity with Windows and/or Linux environments, REST APIs, and fundamental enterprise networking concepts.

• Strong analytical, documentation, communication, and stakeholder management abilities.

• Capability to work independently while also collaborating with globally distributed technology teams.

• Excellent written and verbal communication skills in English.

• Bachelor's degree in computer science, Information Technology, Cybersecurity, Engineering, or a related technical field.

• Preferred: Experience with DigiCert TLM, DigiCert ONE, Venafi, Keyfactor, Microsoft AD CS, or comparable PKI platforms.

• Preferred: Familiarity with ACME, SCEP, or EST.

• Preferred: Knowledge of OpenSSL, cloud certificate management, Azure Key Vault, or AWS Certificate Manager.

• Preferred: Experience in supporting S/MIME, code signing, VPN/Wi-Fi, public/private TLS, or machine identity certificates.

• Preferred: Understanding of Microsoft Intune, Active Directory, Entra ID (Azure AD), and enterprise device certificate deployment.

• Preferred: Exposure to DevOps methodologies, certificate lifecycle automation, and CI/CD platforms like Azure DevOps, GitHub Actions, GitLab CI/CD, or Jenkins.

🏝️ Benefits

• Flexible and supportive work environment.

• Focus on employee well-being.

• Hands-on experience in the field.

• Opportunities for learning and development.

• Possibility to obtain certifications across all four major platforms.

• "Be Well" programs that support financial, mental, physical, and social health.

• Customized development goals tailored to individual needs.

• Continuous feedback to foster improvement.

• Certification opportunities with Microsoft, Google, and Amazon.

• Access to coaching and practical experiences.

• Cutting-edge learning opportunities available.

• Employee referral program in place.