Job Description
The PKI Engineer supports and enhances the enterprise certificate management environment. The role manages the full certification lifecycle, maintain PKI infrastructure, support cloud and infrastructure security initiatives, and help ensure the reliability and compliance of critical certificate services.
KEY RESPONSIBILITIES
You will:
- Administer and maintain PKI infrastructure and certificate lifecycle activities, including issuance, renewal, and revocation.
- Deploy and manage certificates across servers, applications, load balancers, and cloud environments.
- Monitor certificate health and expiration to prevent service disruptions.
- Troubleshoot certificate-related incidents and infrastructure issues.
- Support compliance, audit, and security requirements.
- Develop basic automation using PowerShell, Python, or shell scripting.
- Maintain operational documentation, inventory, and runbooks.
QUALIFICATIONS:
- Has strong background/experience in Wintel
- 5 years in compute, infrastructure, or systems administration.
- 3 years hands on experience managing PKI and certificate services.
- Strong operational experience with Certificate issuance and renewals, Internal and external Eertificates, and Enterprise infrastructure environments
- Technical Skills (Administrator-Level)
- X.509 certificates
- TLS / HTTPS
- Experience administering Microsoft AD CS and/or enterprise PKI tools.
- Hands-on experience deploying certificates to Windows/Linux servers, IIS, Apache, Nginx, and Load balancers or reverse proxies
- Familiarity with certificate tooling such as Venafi, Keyfactor, AppViewX, DigiCert, Sectigo (any one or more)
- Working knowledge of PowerShell and/or basic Python or shell scripting and ITSM tools (e.g., ServiceNow)
Work Schedule: Hybrid (Onsite – 10 times a month)
Shift Schedule: Graveyard Shift
Location: Makati City