Digital Certificate|PKI Engineer

Qualifications

Technical & Behavioral Competencies

Experience:

• 3–5 years of hands-on experience managing internal and external digital certificates.
• At least 2 years of experience with Certificate Authorities (CAs) such as DigiCert (preferred), Gandi, or GlobalSign.
• Preferably 1–2 years of experience in a multinational company managing over 1,000 certificates.

Behavioral Abilities:

• Strong English communication skills, both verbal and written.
• A collaborative team player capable of driving initiatives and working with peers across functions.
• Self-driven, proactive, and passionate about using technology to solve complex problems.
• Strong critical thinking, analytical, and problem-solving skills.
• Ability to communicate effectively with diverse technical and non-technical audiences.

Technical Environment

1. Public Key Infrastructure (PKI):

• Understanding of PKI concepts (asymmetric encryption, digital signatures, certificate chains).
• Experience with internal and external CAs.
• Knowledge of X.509 certificate structure.

2. Certificate Lifecycle Management:

• Expertise in issuance, renewal, revocation, and expiration tracking of certificates.

3. Tools & Platforms:

• Proficiency with DigiCert (required) and GlobalSign (required).
• Experience using OpenSSL, HashiCorp Vault, Venafi, Sectigo, and Keyfactor.

4. Cryptography:

• Knowledge of encryption algorithms (RSA, ECC, AES) and hashing (SHA-2, SHA-3).
• Understanding of digital signatures and certificate trust models.

5. Operating Systems:

• Admin-level experience with Windows Server (especially Active Directory Certificate Services).
• Linux/Unix system administration for managing certificates and related services.

6. Networking & Protocols:

• Deep understanding of SSL/TLS, HTTPS, S/MIME, IPsec, and VPNs.
• Familiarity with OCSP, CRL, LDAP, and DNS protocols.

7. Scripting & Automation:

• Skilled in scripting with PowerShell, Bash, and Python for automation and integration.
• Experience automating certificate issuance and renewal processes.

8. Security Tools & Platforms:

• Experience with certificate management platforms, SIEM tools (e.g., Splunk, QRadar), and vulnerability scanners (e.g., Nessus, Qualys).

9. Cloud & DevOps Integration:

• Managing certificates across Azure Key Vault, AWS Certificate Manager, and Google Cloud Certificate Manager.
• Integrating certificate management into CI/CD pipelines and container environments (Kubernetes, Docker).

Job Description

Main Responsibilities:

1. Certificate Lifecycle Management

• Request, issue, renew, revoke, and monitor all digital certificates.
• Maintain a centralized certificate inventory and ensure timely renewals.

2. Security and Compliance

• Enforce organizational certificate policies and standards (key lengths, validity periods).
• Ensure regulatory compliance (e.g., PCI-DSS, HIPAA, ISO
• Monitor and respond to certificate misuse or compromise.

3. PKI Infrastructure Management

• Manage internal Certificate Authorities (CAs) and subordinate CAs.
• Configure and maintain OCSP responders and CRL distribution points.
• Ensure high availability, security, and reliability of PKI components.

4. Incident Response

• Respond to certificate-related incidents (e.g., expired or compromised certificates).
• Revoke and reissue certificates as needed during security events.

5. Collaboration and Support

• Partner with DevOps, IT, and Application Teams to integrate certificates into systems securely.
• Provide guidance and best practices for certificate usage and configuration.

6. Documentation and Reporting

• Maintain up-to-date documentation for certificate policies, procedures, and inventories.
• Generate regular compliance and risk reports on certificate usage and performance.

7. (Nice to Have) Automation & Tooling

• Implement and manage certificate automation tools (e.g., Venafi, DigiCert, Sectigo).
• Develop scripts or solutions to automate certificate discovery, issuance, and renewal.

Job Type: Full-time

Benefits:

• Company events
• Health insurance
• Opportunities for promotion
• Paid training
• Pay raise
• Work from home

Work Location: In person