[Hiring] PKI & Certificate Lifecycle Engineer @Kyndryl

Role Description

• PKI Operations & Administration: Administer and support DigiCert TLM and related PKI services, including certificate requests, issuance, renewal, revocation, inventory management, monitoring, and certificate retirement.
• Certificate Support: Assist users and technology teams with public TLS, private TLS, S/MIME, code-signing, VPN/Wi-Fi, endpoint, server, application, and other machine identity certificates. Troubleshoot certificate lifecycle, trust, and deployment issues.
• Infrastructure Collaboration: Partner with network, application, cloud, endpoint, and infrastructure teams to gather requirements, coordinate certificate onboarding, support integrations, and resolve service issues.
• Automation & Continuous Improvement: Develop scripts, reports, and workflows to improve certificate inventory, monitoring, renewal, notification, and operational efficiency. Contribute to service enhancements and broader PKI capabilities.
• Security & Service Management: Follow PKI governance and security standards, maintain operational documentation, support incident and problem management, and escalate risks and issues appropriately.

Qualifications

• 3+ years of experience in PKI, certificate management, cybersecurity, infrastructure engineering, or a related technical field.
• Practical understanding of X.509 certificates, certificate authorities, certificate chains, public/private keys, and SSL/TLS.
• Experience with an enterprise PKI, managed PKI, or certificate lifecycle management platform.
• Ability to troubleshoot certificate enrollment, renewal, trust, installation, and configuration issues.
• Basic scripting or automation experience using Python, PowerShell, Bash, or a similar technology.
• Familiarity with Windows and/or Linux environments, REST APIs, and enterprise networking concepts.
• Strong analytical, documentation, communication, and stakeholder management skills.
• Ability to work independently and collaborate with distributed global technology teams.
• Strong written and spoken English communication skills.

Requirements

• Experience with DigiCert TLM, DigiCert ONE, Venafi, Keyfactor, Microsoft AD CS, or similar PKI platforms.
• Exposure to certificate automation technologies such as ACME, SCEP, or EST.
• Familiarity with OpenSSL, cloud certificate management, Azure Key Vault, or AWS Certificate Manager.
• Experience supporting S/MIME, code signing, VPN/Wi-Fi, public/private TLS, or machine identity certificates.
• Familiarity with Microsoft Intune, Active Directory, Entra ID (Azure AD), and enterprise device certificate deployment.
• Exposure to DevOps methodologies and automation practices with certificate lifecycle automation.
• Exposure to CI/CD platforms such as Azure DevOps, GitHub Actions, GitLab CI/CD, or Jenkins.

Education

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Engineering, or a related technical discipline.

Benefits

• Dynamic, hybrid-friendly culture that supports well-being and empowers growth.
• Be Well programs designed to support financial, mental, physical, and social health.
• Access to impactful work that powers customer systems.
• Tools to chart career paths and personalized development goals.
• Continuous feedback and access to cutting-edge learning opportunities.