All openings
Senior Certificate Lifecycle Management / PKI Automation Engineer
Job ID OB-2026-0391
Apply for this roleAbout the role
We’re looking for a contractor to help build an enterprise certificate lifecycle management program on Akeyless — and the emphasis here is on last-mile deployment, not just issuance.
If you’ve only administered a Microsoft PKI, this probably isn’t the role. We need someone who understands the consumption side: where TLS actually terminates, how each platform wants its cert and key, and how to automate the whole rotation without taking the service down.
What you’d own:
→ Akeyless CLM architecture, config, and implementation — issuers, gateways, targets, provisioning workflows
→ Automated cert deployment to the systems actually presenting them: F5 BIG-IP, IIS, NGINX, Apache, Tomcat, Kubernetes ingress, cloud load balancers
→ Service reload/activation, post-deployment validation, rollback and failure handling
→ Discovery and TLS fingerprinting across a large heterogeneous estate — starting from an FQDN and tracing DNS → VIP → termination point → rotation method
→ Reusable automation patterns, runbooks, and knowledge transfer to internal engineers
→ Akeyless CLM architecture, config, and implementation — issuers, gateways, targets, provisioning workflows
→ Automated cert deployment to the systems actually presenting them: F5 BIG-IP, IIS, NGINX, Apache, Tomcat, Kubernetes ingress, cloud load balancers
→ Service reload/activation, post-deployment validation, rollback and failure handling
→ Discovery and TLS fingerprinting across a large heterogeneous estate — starting from an FQDN and tracing DNS → VIP → termination point → rotation method
→ Reusable automation patterns, runbooks, and knowledge transfer to internal engineers
What we’re looking for:
- 7+ years infrastructure/security engineering; 5+ in PKI, TLS, or certificate management platforms
- Deep X.509 fundamentals — CSRs, chains, intermediates, SAN/CN, PEM/DER/PKCS#12, private key handling
- Hands-on with F5, IIS, NGINX, Apache, or similar TLS termination tech
- Strong automation: PowerShell, Python, Bash, REST APIs, CI/CD
- Direct Akeyless production experience strongly preferred
- Comfortable with OpenSSL, Nmap, curl, handshake analysis
Apply for this role
Takes a few minutes. Have your resume ready as a PDF or Word file, or your LinkedIn profile.
Not quite the right role?
Tell us the work you are looking for. A recruiter will keep your details and contact you when something fits.