PKI Engineer

You bring strong PKI and security knowledge, customer focus and ownership. You understand certificate lifecycle management, certificate profiles, extensions, ACME, CMP, EST, SCEP and validation methods such as DNS-01 and HTTP-01. You apply security principles in a regulated enterprise environment and understand cryptography and protocols such as RSA, ECC, AES, SHA, TLS/SSL, HTTPS, S/MIME and code signing. You analyse issues related to onboarding, DNS, Linux, pipelines and certificate chains, and continuously improve documentation, self-service, automation and the user experience.

• Experience as a PKI, Security, DevOps or Platform Engineer.
• Knowledge of PKI, certificate management and certificate profiles.
• Familiarity with ACME, CMP, EST, SCEP, DNS-01 and HTTP-01.
• Knowledge of RSA, ECC, AES, SHA, TLS/SSL and HTTPS.
• Experience with scripting, CI/CD tooling and pipelines.
• Strong troubleshooting skills for DNS, Linux and certificate chains.
• Customer-focused, strong communicator and good at documentation.
• Agile team player; knowledge of CRL, OCSP or PQC is a plus.