IT Certification Admin|Hybrid

Qualifications

Technical and behavior abilities:

• Have at least 3 - 5 years of hands-on experience in managing internal and external certificates.
• Have at least 2 years of experience on any of the Certificate Authority – Digicert(preferred), Gandi or Global sign.
• Preferably have at least 1-2 years in a multi-national company managing more than 1000 certificates.

Behavior abilities:

1. Strong English verbal and written communication skills.

2. A team player with the ability to drive projects and initiatives with peers.

3. Enjoy challenges and love applying technology to solve problems.

4. Self-Lead and Exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills

Technical environment:

1. Public Key Infrastructure (PKI)

· Understanding of PKI concepts: asymmetric encryption, digital signatures, certificate chains.

· Experience with internal and external Certificate Authorities (CAs).

· Knowledge of X.509 certificate structure.

1. Certificate Lifecycle Management

· Issuance, renewal, revocation, and expiration tracking.

1. Familiarity with tools like:

· Digicert (required)

· Globalsign (required)

· OpenSSL

· HashiCorp Vault

· Venafi, Sectigo, Keyfactor Cryptography

· Knowledge of encryption algorithms (RSA, ECC, AES).

· Understanding of hashing (SHA-2, SHA-3) and digital signatures.

1. Operating Systems : Admin-level experience with:

· Windows Server (especially with Active Directory Certificate Services)

· Linux/Unix systems for managing certificates and services

1. Networking & Protocols

· Understanding of SSL/TLS, HTTPS, S/MIME, IPsec, and VPNs.

· Familiarity with protocols like OCSP, CRL, LDAP, and DNS.

1. Scripting & Automation

· Knowledge on scripting languages:

i. PowerShell (especially for Windows environments)

ii. Bash (for Linux)

iii. Python (for automation and integration)

· Experience automating certificate issuance and renewal.

1. Security Tools & Platforms

· Experience with:

i. Certificate management platforms

ii. SIEM tools (e.g., Splunk, QRadar)

iii. Vulnerability scanners (e.g., Nessus, Qualys)

1. Cloud & DevOps Integration

· Managing certificates in cloud platforms:

i. Azure Key Vault

ii. AWS Certificate Manager

iii. Google Cloud Certificate Manager

iv. Integrating certificates into CI/CD pipelines and containerized environments (e.g., Kubernetes, Docker).

Job Description

Main Responsibilities:

· Certificate Lifecycle Management

o Request, issue, renew, and revoke digital certificates.

o Track certificate expiration dates and ensure timely renewals.

o Maintain an inventory of all certificates in use.

· Security and Compliance

o Enforce certificate policies and standards (e.g., key length, validity period).

o Ensure compliance with industry regulations (e.g., PCI-DSS, HIPAA, ISO

o Monitor for certificate misuse or compromise.

· PKI Infrastructure Management

o Manage internal Certificate Authorities (CAs) and subordinate CAs.

o Configure and maintain OCSP responders and CRL distribution points.

o Ensure high availability and security of PKI components.

· Incident Response

o Respond to certificate-related incidents (e.g., expired or compromised certificates).

o Revoke and reissue certificates as needed during security events.

· Collaboration and Support

o Work with DevOps, IT, and application teams to integrate certificates into systems.

o Provide guidance on certificate best practices and secure configurations.

· Documentation and Reporting

o Maintain documentation of certificate policies, procedures, and inventories.

o Generate reports on certificate usage, compliance, and risk.

· Nice to have:

o Automation and Tooling

o Implement and manage certificate management tools (e.g., Venafi, DigiCert, Sectigo).

o Automate certificate discovery, issuance, and renewal processes.

Job Type: Full-time

Pay: Php45, Php60,000.00 per month

Benefits:

• Company events
• Health insurance
• Opportunities for promotion
• Paid training
• Pay raise
• Work from home

Work Location: In person