PKI & Certificate Lifecycle Engineer
Core
Administer and support DigiCert TLM and related PKI services, managing certificate requests, issuance, renewal, revocation, and inventory for machine identities.
Role type
PKI & Certificate Lifecycle Engineer (via careerplan.io/jobs/R-69076-1-pki-certificate-lifecycle-engineer-at-kyndryl)
Builds
Secure certificate infrastructure for enterprise clients
Domain
Cybersecurity / PKI
Required skills
PKI operations, X.509 certificates, certificate authorities, SSL/TLS, enterprise PKI platforms, troubleshooting, Python/PowerShell/Bash scripting, Windows/Linux environments, REST APIs
Preferred skills
DigiCert TLM/ONE, Venafi, Keyfactor, Microsoft AD CS, ACME/SCEP/EST, OpenSSL, Azure Key Vault, AWS Certificate Manager, Microsoft Intune, Entra ID, DevOps, CI/CD platforms
Technologies
DigiCert TLM, DigiCert ONE, Venafi, Keyfactor, Microsoft AD CS, ACME, SCEP, EST, OpenSSL, Azure Key Vault, AWS Certificate Manager, Microsoft Intune, Entra ID, Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins
Responsibilities
Administer DigiCert TLM and PKI services; assist users with TLS, S/MIME, code-signing, and machine identity certificates; partner with network and cloud teams on certificate onboarding; develop scripts for automation and inventory management; maintain operational documentation and support incident management
Seniority
Mid-level, hands-on IC
