Systems Engineer IV ((CLM) / PKI Automation Engineer)
About The Position
We are seeking an experienced Certificate Lifecycle Management (CLM) / PKI Automation Engineer to support the design and implementation of an enterprise certificate lifecycle management program utilizing Akeyless. The resource will help establish scalable processes for discovering, managing, issuing, renewing, rotating, provisioning, and validating TLS certificates across a diverse enterprise technology environment. A critical focus of this engagement is last-mile certificate deployment. The ideal candidate will have practical experience with PKI and certificate management platforms, as well as the infrastructure that terminates TLS and presents certificates to clients. This includes web servers, application servers, reverse proxies, load balancers, application delivery controllers, network appliances, Windows and Linux systems, cloud services, containers, and other certificate-consuming endpoints. The successful candidate should be capable of taking a certificate lifecycle from discovery through inventory, issuance, renewal, deployment, service activation or reload, validation, and monitoring. The objective is to reduce manual certificate management and establish repeatable, secure automation for certificate rotation across heterogeneous infrastructure.
Requirements
- 7+ years of infrastructure or security engineering experience.
- 5+ years working with PKI, certificates, TLS, or certificate management platforms.
- Experience implementing enterprise CLM automation.
- Experience supporting large, heterogeneous enterprise environments.
- Experience integrating certificate automation with existing infrastructure rather than requiring applications to be redesigned.
- Experience developing reusable deployment patterns across multiple application and server technologies.
Nice To Haves
- Direct production experience with Akeyless is highly preferred.
- Experience migrating organizations from manual certificate renewal to automated certificate lifecycle management.
Responsibilities
- Support the design and implementation of an enterprise certificate lifecycle management program utilizing Akeyless.
- Establish scalable processes for discovering, managing, issuing, renewing, rotating, provisioning, and validating TLS certificates across a diverse enterprise technology environment.
- Automate last-mile certificate deployment to infrastructure that terminates TLS and presents certificates to clients.
- Support certificate deployment across web servers, application servers, reverse proxies, load balancers, application delivery controllers, network appliances, Windows and Linux systems, cloud services, containers, and other certificate-consuming endpoints.
- Support the certificate lifecycle from discovery and inventory through issuance, renewal, deployment, service activation or reload, validation, and monitoring.
- Reduce manual certificate management and establish repeatable, secure automation for certificate rotation across heterogeneous infrastructure.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
