7+ years of infrastructure/security engineering experience
5+ years of experience with PKI, TLS, or certificate management platforms
Direct production experience with Akeyless is highly preferred
Experience in implementing enterprise CLM automation
Proven track record of migrating from manual to automated certificate management
Experience in large heterogeneous enterprise environments
Ability to integrate certificate automation without redesigning applications
Responsibilities
Design and implement an enterprise certificate lifecycle management program using Akeyless
Establish scalable processes for managing TLS certificates across diverse technology environments
Focus on last-mile certificate deployment to ensure effective implementation
Oversee the entire certificate lifecycle from discovery to monitoring
Reduce manual management through secure automation of certificate rotation
Collaborate with teams to integrate certificate automation into existing infrastructure
Develop reusable deployment patterns for various application and server technologies
Benefits
Opportunity to work with cutting-edge certificate management technologies
Engagement in a critical role that impacts enterprise security
Chance to streamline and automate processes in a large-scale environment
Collaboration with diverse teams across the organization
Professional growth in a specialized area of cybersecurity
Full Job Description
Position Summary
We are seeking an experienced Certificate Lifecycle Management (CLM) / PKI Automation Engineer to support the design and implementation of an enterprise certificate lifecycle management program utilizing Akeyless.
The resource will help establish scalable processes for discovering, managing, issuing, renewing, rotating, provisioning, and validating TLS certificates across a diverse enterprise technology environment.
A critical focus of this engagement is last-mile certificate deployment.
The ideal candidate will have practical experience not only with PKI and certificate management platforms, but with the infrastructure that actually terminates TLS and presents certificates to clients. This includes web servers, application servers, reverse proxies, load balancers, application delivery controllers, network appliances, Windows and Linux systems, cloud services, containers, and other certificate-consuming endpoints.
The successful candidate should be capable of taking a certificate lifecycle from: Discovery 12 Inventory 12 Issuance 12 Renewal 12 Deployment 12 Service activation/reload 12 Validation 12 Monitoring
The objective is to reduce manual certificate management and establish repeatable, secure automation for certificate rotation across heterogeneous infrastructure.
Preferred Skills:
7+ years of infrastructure/security engineering experience
5+ years working with PKI, certificates, TLS, or certificate management platforms
Experience implementing enterprise CLM automation
Direct production experience with Akeyless highly preferred
Experience migrating organizations from manual certificate renewal to automated certificate lifecycle management
Experience supporting large heterogeneous enterprise environments
Experience integrating certificate automation with existing infrastructure rather than requiring applications to be redesigned
Experience developing reusable deployment patterns across multiple application/server technologies
