Jobs → Engineering → PKI Engineer

About the Role We are looking for an experienced PKI Engineer to implement, manage, and maintain enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) services in a global environment. Key Responsibilities • Administer and maintain enterprise PKI and certificate management platforms. • Manage certificate lifecycle activities, including issuance, renewal, revocation, and recovery. • Automate certificate management workflows, governance processes, and security controls. • Support Certificate Authority (CA) renewals, migrations, and key ceremonies. • Troubleshoot complex certificate chain issues and support PKI architecture improvements. • Develop and maintain certificate policies, standards, and operational procedures. • Collaborate with global development and operations teams to strengthen application security. Requirements • Hands-on experience with Venafi and CyberArk • Strong knowledge of Certificate Lifecycle Management (CLM) • Scripting experience with Python, PowerShell, or Bash • Strong understanding of PKI operations, certificate issuance, renewal, revocation, and recovery • Excellent communication and collaboration skills • Bachelor's degree in Computer Science, Software Engineering, Mathematics, or a related field preferred Preferred Qualifications • Experience with security automation and platform integrations • Knowledge of cloud infrastructure, particularly AWS • Experience implementing new PKI systems and certificate migration projects • Familiarity with Docker, Kubernetes, and CI/CD pipelines • Strong server administration and command-line troubleshooting skills