> Markdown version of [/jobs/ext/1266584-pki-engineers](https://www.wearedevelopers.com/jobs/ext/1266584-pki-engineers). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# PKI Engineers

- **Company:** NATO
- **Location:**  (Bergen), Belgium (Remote available)
- **Experience:** Experienced
- **Contract:** Temporary contract
- **Skills:** Microsoft Windows, Apple Mac Systems, Bash Shell, Cyber Security, Information Systems, Linux, Internet Protocol Security (IP SEC), Python (Programming Language), Multi-Purpose Internet Mail Extensions (MIME), Public Key Infrastructure, X.509, Windows PowerShell, Ansible, RSA (Cryptosystem), Secure Hash Algorithm, Web Application Security, SSL Certificate Management, Transport Layer Security, Cloud Platform System, System Availability, Infrastructure Automation Frameworks, Information Technology
- **Published:** July 15, 2026
- **Apply:** https://www.careerjet.be/jobad/be91db2daa24eedd824c59c80bb8a03ac6

## About the Role

The valuable knowledge and experience that you bring to this role are:
Bachelor's degree at a nationally recognised/certified University in a related discipline and 2 years post-related experience. Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCIA, that is, at least 6 years extensive and progressive expertise in duties related to the function of the post;
At least 2 years of practical experience in designing, deploying, and supporting secure web services and associated architectures;
Advanced expertise in PKI technologies, including X.509 digital certificates, Certificate Authorities, and supporting protocols such as OCSP, CRL distribution, and S/MIME;
Strong background in cryptographic algorithms (RSA, ECC, AES, SHA-2) and security protocols such as TLS/SSL and IPsec;
Proven capability in identifying, assessing, and mitigating security vulnerabilities, with experience applying industry best practices and compliance frameworks;
Minimum 2 years of experience managing Credential Management Systems (CMS), including enrolment workflows, lifecycle management, and secure key handling;
Skilled in troubleshooting certificate-related issues across multiple operating systems, including Windows, Linux, and macOS;
Fluency in English, both written and spoken.

## Description

Based in Mons, Belgium, you will join the Agency as we embark on a journey to transform our IT services to support NATO's Digital Endeavour. You will join NATO Cyber Security Centre (NCSC), which is responsible for planning and executing all lifecycle management activities for cyber security. In executing this responsibility, NCSC provides specialist cyber security-related services covering the spectrum of scientific, technical, acquisition, operations, maintenance, and sustainment support, throughout the lifecycle of NATO Communications and Information Systems (CIS).
We are looking for driven and enthusiastic PKI Engineers who will take on the following roles and responsibilities:
Manage the full lifecycle of digital certificates, including issuance, renewal, revocation, and compliance auditing, ensuring the integrity and reliability of the organization's PKI environment;
Develop and implement automation workflows to streamline certificate management processes, reduce manual effort, and minimize operational risk;
Analyze PKI system performance, identify optimization opportunities, and contribute to scalability improvements that meet evolving business needs;
Contribute to ensuring high availability, resilience, and performance of PKI services across on-premises, hybrid, and cloud environments;
Support the automation of certificate management workflows using scripting and automation tools (e.g., PowerShell, Python, Bash, Ansible, or similar technologies);
Proactively monitor certificate health, identify potential expiration issues, and coordinate timely remediation to prevent service disruptions;
Document actions taken and provide clear recommendations for follow-up or preventive measures to stakeholders.
For a full list of duties, please review the on the NCIA career site.
The majority of the activities will be performed on site, with potential travels and will allow limited work from home. Note that the internal job title is Cyber Security Infrastructure Specialist.


## Related Videos

- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [Post-Quantum Cryptography: Preparing for Q-Day](https://www.wearedevelopers.com/videos/100179-post-quantum-cryptography-preparing-for-q-day)
- [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation)

## Related Articles

- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)