Job description

Position Summary • We are seeking an experienced Certificate Lifecycle Management (CLM) / PKI Automation Engineer to support the design and implementation of an enterprise certificate lifecycle management program utilizing Akeyless. • The resource will help establish scalable processes for discovering, managing, issuing, renewing, rotating, provisioning, and validating TLS certificates across a diverse enterprise technology environment. • A critical focus of this engagement is last-mile certificate deployment. • The ideal candidate will have practical experience not only with PKI and certificate management platforms, but with the infrastructure that actually terminates TLS and presents certificates to clients. This includes web servers, application servers, reverse proxies, load balancers, application delivery controllers, network appliances, Windows and Linux systems, cloud services, containers, and other certificate-consuming endpoints. • The successful candidate should be capable of taking a certificate lifecycle from: Discovery → Inventory → Issuance → Renewal → Deployment → Service activation/reload → Validation → Monitoring • The objective is to reduce manual certificate management and establish repeatable, secure automation for certificate rotation across heterogeneous infrastructure. Preferred Skills: • 7+ years of infrastructure/security engineering experience • 5+ years working with PKI, certificates, TLS, or certificate management platforms • Experience implementing enterprise CLM automation • Direct production experience with Akeyless highly preferred • Experience migrating organizations from manual certificate renewal to automated certificate lifecycle management • Experience supporting large heterogeneous enterprise environments • Experience integrating certificate automation with existing infrastructure rather than requiring applications to be redesigned • Experience developing reusable deployment patterns across multiple application/server technologies

Requirements

Must-haves

We are seeking an experienced Certificate Lifecycle Management (CLM) / PKI Automation Engineer to support the design and implementation of an enterprise certificate lifecycle management program utilizing Akeyless.
The resource will help establish scalable processes for discovering, managing, issuing, renewing, rotating, provisioning, and validating TLS certificates across a diverse enterprise technology environment.
A critical focus of this engagement is last-mile certificate deployment.
The successful candidate should be capable of taking a certificate lifecycle from: Discovery → Inventory → Issuance → Renewal → Deployment → Service activation/reload → Validation → Monitoring
The objective is to reduce manual certificate management and establish repeatable, secure automation for certificate rotation across heterogeneous infrastructure.
7+ years of infrastructure/security engineering experience
5+ years working with PKI, certificates, TLS, or certificate management platforms

Nice-to-haves

Experience implementing enterprise CLM automation
Direct production experience with Akeyless highly preferred
Experience migrating organizations from manual certificate renewal to automated certificate lifecycle management
Experience supporting large heterogeneous enterprise environments
Experience integrating certificate automation with existing infrastructure rather than requiring applications to be redesigned
Experience developing reusable deployment patterns across multiple application/server technologies

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: catsone
Effort: medium

Benefits

Benefits detected in the listing.

Vision