Senior Infrastructure Engineer
Core
Design, operate, and evolve an enterprise certificate management platform supporting thousands of certificates across global multi-cloud and on-premise environments.
Role type
Senior Infrastructure Engineer (Certificate Management)
Builds
Scalable, automated certificate lifecycle management capabilities and self-service workflows for service teams.
Domain
Enterprise Infrastructure / PKI / Security
Deliverable
infrastructure
Required skills
TLS/PKI fundamentals, certificate lifecycle management, automation scripting (Python), infrastructure-as-code (Terraform, Ansible), distributed environment operations, complex troubleshooting, cross-functional collaboration
Preferred skills
Enterprise certificate management platforms (AppViewX, Sectigo, CyberArk), public CA integration (DigiCert, Let's Encrypt), ACME/EST/SCEP protocols, CRL/OCSP management, private CA (AWS Private CA, Vault), observability (Prometheus, Grafana, Splunk), Kubernetes, Linux systems, openssl validation
Technologies
Python, Terraform, Ansible, openssl, Prometheus, Grafana, Splunk, ElasticSearch, OpenSearch, Kubernetes, AWS Private CA, HashiCorp Vault, Microsoft Certificate Services
Responsibilities
Design and implement enterprise standards for certificate lifecycle management (issuance, renewal, revocation, DCV); Engineer automation for scalable certificate operations across multi-cloud and on-prem environments; Develop integrations for automated certificate issuance and lifecycle management; Implement certificate discovery and inventory capabilities; Build supporting automation using scripting and infrastructure-as-code tools; Enable federated self-service capabilities while maintaining central governance; Improve observability of certificate health through metrics, logging, and alerting; Troubleshoot complex certificate lifecycle issues; Maintain documentation, architectural diagrams, and operational runbooks; Evolve the platform to support changing industry requirements.
Seniority
Senior, hands-on IC