Job Description & Details
This is a heavy-duty infrastructure security gig focused on wrangling enterprise-scale Public Key Infrastructure and Certificate Lifecycle Management. If you enjoy building rock-solid security guardrails that keep global systems online without driving developers crazy with red tape, this role hits the sweet spot.
What You'll Actually Be Doing
You'll spend your days managing certificate issuance, renewals, and revocations across complex multi-cloud environments. Much of your time will go toward writing automation scripts to prevent expired certs from taking down production services, coordinating key ceremonies, and troubleshooting gnarly certificate chain errors when integrations inevitably break.
The Core Tech Stack
You need deep, hands-on experience with Certificate Lifecycle Management tools like Venafi, CyberArk, or Sectigo. On top of that, your scripting chops in Python, PowerShell, or Bash need to be production-ready because automation is the only way to scale this workload. Solid AWS infrastructure knowledge and command-line troubleshooting skills are also absolute non-negotiables.
Interview Expectations
Expect the interview panel to throw a complex troubleshooting scenario at you involving a broken trust chain in a hybrid cloud setup, testing whether you can systematically isolate where the validation failed. They will also likely drill down into your automation experience, asking how you would design a zero-touch certificate rotation pipeline using Python or PowerShell to see if you actually understand the software development lifecycle.
Application Advice
Skip the generic resume templates and make sure your CV explicitly highlights your experience with Venafi or similar CLM platforms, along with concrete examples of Python or PowerShell scripts you've written for security automation. Mirror keywords from the job description like certificate lifecycle management, key ceremonies, and AWS infrastructure to make sure you clear the initial ATS filters seamlessly.