Senior Infrastructure & Security Architect (CertaaS)

Quick Facts

• Long-term CertaaS-focused infrastructure and security architecture role for a European Union organization
• Hybrid setup with 1 trip per month to Luxembourg (negotiable), without reimbursement
• B2B contract
• Rate: 650 EUR net/MD

Description

You will lead the technical evolution and adoption of a CertaaS (Certificate as a Service) platform, establishing it as the single, authoritative, automated solution for managing the complete lifecycle of digital certificates across all infrastructure and network services. The role blends strong architectural expertise with hands-on engineering: designing, implementing, integrating, troubleshooting, and deploying certificate management solutions. You will serve as the cross-squad technical bridge to ensure certificate lifecycle management is consistent, secure, reusable, and centrally governed.

Responsibilities

• Define and maintain the target CertaaS ecosystem covering issuance, renewal, distribution, installation, monitoring, and revocation
• Design scalable, secure, highly available, automated certificate lifecycle management
• Develop standard integration patterns, reusable APIs, workflows, and automation components
• Define certificate management standards (profiles, naming conventions, trust chains, key protection, cryptographic requirements)
• Consolidate existing certificate management practices into CertaaS and contribute to the CertaaS technical roadmap
• Integrate and validate CertaaS across domains: Reverse Proxy (NGINX), Load Balancing (F5 BIG-IP/VELOS), VPN & Remote Access, Firewalls (Fortinet/Check Point), Network Infrastructure, Cisco ISE (EAP-TLS), Telephony (Cisco CUCM), and Videoconferencing (TLS/mTLS)
• Develop or directly contribute to integration components and automation; ensure integrations are documented, tested, monitored, and maintainable
• Produce working implementations (scripts/APIs/automation), troubleshoot TLS/PKI and certificate chain issues, and support production deployments and incidents
• Provide cross-squad technical leadership: resolve integration blockers, promote reusable solutions, and enable transition to CertaaS
• Ensure security/compliance and operational readiness: monitoring, alerting/escalation, traceability, rollback/recovery mechanisms, and knowledge transfer

Requirements

• Senior infrastructure or security architect profile with hands-on engineering experience
• Expert understanding of PKI and certificate management (X.509, TLS 1.2/1.3, mutual TLS, trust chains)
• Practical experience automating and integrating certificate lifecycle management across multiple infrastructure domains
• Ability to design and implement technical solutions independently (not only document architecture)
• Strong troubleshooting skills for TLS/PKI, certificate chain, and authentication issues
• Experience implementing reusable automation components within Git-based engineering governance (e.g., version-controlled delivery with testing and controlled releases)
• Cryptographic key management knowledge (secure key storage/HSM concepts)
• Proven ability to collaborate across multiple teams/squads and influence technical decisions

Benefits

• B2B contract
• Hybrid work model with 1 trip/month to Luxembourg (negotiable), without reimbursement
• Rate: 650 EUR net/MD