Senior PKI / Platform Engineer

100% Remote | B2B via Experis | Start: ASAP / within 1 month / flexible

We are looking for a Senior PKI / Platform Engineer to lead the delivery of an Enterprise PKI Automation MVP. You will drive the modernization of certificate lifecycle management through automation, improved visibility, and scalable platform solutions, working closely with internal infrastructure and security teams.

Responsibilities

• Lead the technical delivery of the PKI automation platform

• Define architecture and certificate lifecycle automation standards

• Design certificate inventory, ownership, and observability solutions

• Implement automated certificate issuance and renewal using ACME and APIs

• Define DNS integration patterns for certificate validation

• Design service identity solutions for automated operations

• Guide engineers and coordinate technical dependencies

• Collaborate with platform owners and stakeholders on adoption and requirements

• Establish automation, adoption, and operational metrics

Requirements

• 8+ years of Infrastructure or Platform Engineering experience

• Strong enterprise PKI and certificate lifecycle management expertise

• Hands-on experience with ACME-based certificate automation

• Experience integrating certificate platforms and APIs

• Strong Linux and Windows Server administration skills

• Experience with certificate inventory and observability solutions

• Python and/or PowerShell scripting skills

• REST API integration experience

• Azure fundamentals

• Security and compliance experience

• Experience with logging and observability tools, ideally Grafana and Loki

Nice to Have

• HSM architecture and key management

• HydrantID and/or DigiCert experience

• Self-service platform or infrastructure solutions

• Enterprise DNS automation

• Security architecture and compliance expertise

What We Offer

• B2B contract via Experis

• Medicover healthcare package

• Multisport card

• Group life insurance

• Fully remote work model

• Opportunity to lead a strategic PKI modernization and automation initiative in a global environment