Job description

• Experienced Senior Certificate Lifecycle Management (CLM) / PKI Automation Engineer to support the implementation of an enterprise certificate lifecycle management program using Akeyless . • Strong hands-on experience with Public Key Infrastructure (PKI), TLS/SSL certificate management, infrastructure automation, and certificate deployment across enterprise environments. • A key focus is end-to-end certificate automation, particularly last-mile deployment —ensuring renewed certificates are securely installed, activated, and validated on the actual servers, applications, load balancers, and other infrastructure endpoints that terminate TLS connections. Key Responsibilities • Assist with the design, configuration, implementation, and testing of Akeyless Certificate Lifecycle Management (CLM). • Develop automated workflows for certificate discovery, issuance, renewal, rotation, provisioning, and revocation. • Configure and troubleshoot Akeyless Gateway components, certificate issuers, targets, and provisioning workflows. • Integrate Akeyless with existing public and private Certificate Authorities (CAs). • Identify TLS termination points across enterprise infrastructure, including web servers, application servers, load balancers, reverse proxies, and network appliances. • Automate certificate and private-key deployment, configuration updates, service reloads, and certificate activation. • Implement certificate validation, monitoring, failure handling, and rollback mechanisms to minimize application downtime. • Troubleshoot certificate chains, trust issues, CN/SAN mismatches, TLS configurations, permissions, and deployment failures. • Develop reusable automation scripts and deployment patterns using PowerShell, Python, Bash, REST APIs, and related technologies. • Support certificate discovery and endpoint identification usi

Requirements

Must-haves

Experienced Senior Certificate Lifecycle Management (CLM) / PKI Automation Engineer to support the implementation of an enterprise certificate lifecycle management program using Akeyless .
Strong hands-on experience with Public Key Infrastructure (PKI), TLS/SSL certificate management, infrastructure automation, and certificate deployment across enterprise environments.
Assist with the design, configuration, implementation, and testing of Akeyless Certificate Lifecycle Management (CLM).
Develop automated workflows for certificate discovery, issuance, renewal, rotation, provisioning, and revocation.
Configure and troubleshoot Akeyless Gateway components, certificate issuers, targets, and provisioning workflows.
Integrate Akeyless with existing public and private Certificate Authorities (CAs).
Identify TLS termination points across enterprise infrastructure, including web servers, application servers, load balancers, reverse proxies, and network appliances.
Automate certificate and private-key deployment, configuration updates, service reloads, and certificate activation.
Implement certificate validation, monitoring, failure handling, and rollback mechanisms to minimize application downtime.
Troubleshoot certificate chains, trust issues, CN/SAN mismatches, TLS configurations, permissions, and deployment failures.
Develop reusable automation scripts and deployment patterns using PowerShell, Python, Bash, REST APIs, and related technologies.
Support certificate discovery and endpoint identification usi

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonrest

Platform: jobdiva
Effort: medium

Benefits

Benefits detected in the listing.

Vision