PKI Certificate Engineer

Quick Facts

• Role: PKI Certificate Engineer

• Team: International IT Security

• Focus: Public Key Infrastructure (PKI) and certificate lifecycle services (on-prem and cloud)

Description

You will design, implement, maintain, and develop a Public Key Infrastructure (PKI) and digital certificate lifecycle management services. The goal is to ensure secure, available, and automated cryptographic services and certificate management across local and cloud environments. You will work with certificate lifecycle platforms, Certificate Authorities (CAs), and integrations with IT systems and DevOps workflows.

Responsibilities

• Design, implement, and maintain corporate PKI solutions and certificate management systems

• Administer CLM platforms such as Venafi, Keyfactor, DigiCert, AppViewX, or similar tools

• Automate certificate issuance, renewal, revocation, and inventory processes

• Manage internal and external Certificate Authorities (CAs)

• Ensure secure cryptographic key management following security best practices

• Integrate certificate management services with cloud platforms, IT infrastructure, applications, and DevOps environments

• Monitor certificate validity and status, identify expiration risks, and ensure security compliance

• Diagnose and resolve certificate, encryption, and trust mechanism issues

• Create and update operational procedures, standards, and technical documentation

• Collaborate with Security, Infrastructure, Cloud, and Application teams on scalable Machine Identity Management implementations

• Support security audits and regulatory/compliance initiatives

Requirements

• Bachelor’s degree in Computer Science/Engineering or equivalent

• Very good knowledge of PKI infrastructure, digital certificate management, and IT security infrastructure topics

• Practical experience with Certificate Lifecycle Management (CLM) solutions and PKI technologies

• In-depth knowledge of X.509, TLS/SSL, cryptographic mechanisms, and key management principles

• Experience automating certificate processes and writing scripts

• Knowledge of cloud platforms, corporate infrastructure, and DevOps environments

• Ability to analyze and solve complex technical problems

• Very good English communication skills (international environment)

• Optional: German knowledge

• Availability ASAP (preferred) or up to 3-month notice period with month-end effect

• Ability/willingness to visit the Wrocław office 1 day, once or twice per month

Benefits

• Long-term employment contract (no copyright costs; no B2B)

• Annual additional bonuses and premiums

• Direct employment with the company (no intermediaries)

• Efficient recruiting process: 2–3 technical online meetings, up to 1 hour each

• Remote work with office visits in Wrocław 1 day, once or twice per month

• Possibility of on-site or hybrid work for those interested

• Work equipment provided

• Co-financed benefits: private medical care, sports cards, life insurance

• Vacation and holiday cash benefits, Employee Pension Program, Employee Capital Plans

• Integration meetings and events