Specialist Certificate Management Operations

Role & responsibilities

Required skills:

Overall - At least 5+ years of experience in performing Digital Certificate Management Operations including:

1. PKI Fundamentals

• Strong understanding of X.509 certificates, Certificate Authorities (CAs), and Registration Authorities (RAs).
• Experience with certificate lifecycle management: issuance, renewal, and revocation.
• Knowledge of Certificate Revocation Lists (CRLs) and Online Certificate Status Protocol (OCSP).
• Experience leveraging automation for certificate lifecycle management using scripting tools like PowerShell and Python

2. Cryptography

• Familiarity with symmetric and asymmetric encryption techniques. Understanding of hashing algorithms such as SHA-2 and SHA-3.
• Experience with key management and secure key storage practices.

3. Operating Systems

• Working knowledge of Linux systems and open-source PKI tools like OpenSSL and EJBCA.

4. Networking & Protocols

5. Tools & Technologies

• Familiarity with Microsoft AD CS, KeyFactor, Venafi, HashiCorp Vault, and EJBCA.
• Experience managing Hardware Security Modules (HSMs) such as Thales and SafeNet.
• Knowledge of ACME protocol for automated certificate issuance.
• Proficient in automation leveraging scripting languages such as Java, Python, PowerShell, and Bash/Shell scripting.

6. Security & Compliance Knowledge:

• Proven ability to troubleshoot complex certificate-related issues across diverse platforms.
• Strong documentation skills to support audit readiness and operational transparency.
• Familiarity with compliance frameworks such as FIPS 140-2, GDPR, and HIPAA.

Preferred candidate profile

Manage the full lifecycle of digital certificates including issuance, renewal, revocation, and replacement.

Monitor certificate status and proactively address expirations to prevent service disruptions.

Troubleshoot and resolve certificate-related issues across multiple platforms and applications.

Automate certificate management processes using scripting languages and certificate management tools.

Maintain accurate documentation of certificate inventories, configurations, and operational procedures.

Collaborate closely with developers, security teams, network administrators, and other stakeholders to ensure secure and compliant certificate deployments.

Ensure compliance with PKI best practices, industry standards, and regulatory requirements.

Should be flexible to provide coverage in US morning hours

Should be flexible with shifts and supporting on weekends