PKI Engineer - Automation & Secure Certificate Management

NATO; Belgique; Hybride; EUR 60 000 - 90 000; Plein temps

Avantages offerts par ce poste

Expatriation allowances

Education allowances

Private health insurance

30 days vacation + holidays

NATO Pension Scheme

Résumé du poste

NCIA at NATO, based in Mons, Belgium, seeks a PKI Engineer to manage the full lifecycle of digital certificates and drive automation across on‑prem, hybrid and cloud environments, supporting critical NATO systems.

You will join the NATO Cyber Security Centre, require PKI expertise (X.509, OCSP, S/MIME), scripting skills (PowerShell, Python, Bash, Ansible), and English fluency. A five-year contract with attractive tax-free allowances and benefits awaits.

Qualifications

• Bachelor's degree ... 2 years post-related experience; or exceptional 6 years of experience in lieu of degree.
• At least 2 years of practical experience in designing, deploying, and supporting secure web services and associated architectures;
• Advanced PKI expertise including X.509 certificates, CAs, OCSP, CRL, S/MIME;
• Strong cryptographic background (RSA, ECC, AES, SHA-2) and TLS/SSL, IPsec;
• Proven ability to identify, assess, and mitigate security vulnerabilities per best practices;
• Minimum 2 years managing Credential Management Systems (CMS) including enrolment workflows and secure key handling;
• Skilled in troubleshooting certificate issues across Windows, Linux, macOS;
• Fluency in English, both written and spoken.

Responsabilités

• Manage the full lifecycle of digital certificates, including issuance, renewal, revocation, and compliance auditing.
• Develop and implement automation workflows to streamline certificate management processes and reduce manual effort.
• Analyse PKI system performance and contribute to scalability improvements.
• Contribute to high availability, resilience, and performance of PKI services across on-premises, hybrid, and cloud environments.
• Support automation of certificate management workflows using scripting and automation tools (PowerShell, Python, Bash, Ansible).
• Proactively monitor certificate health and coordinate timely remediation to prevent disruptions.
• Document actions and provide clear recommendations for follow-up or preventive measures.

Connaissances

PKI technologies

X.509 certificates

OCSP

CRL distribution

S/MIME

TLS/SSL

IPsec

Windows

Linux

macOS

Python

PowerShell

Bash

Ansible

CMS

Security vulnerabilities

English fluency

Formation

Bachelor's degree in related discipline

Outils

PowerShell

Python

Bash

Ansible

Description du poste

NCIA at NATO, based in Mons, Belgium, seeks a PKI Engineer to manage the full lifecycle of digital certificates and drive automation across on‑prem, hybrid and cloud environments, supporting critical NATO systems.

You will join the NATO Cyber Security Centre, require PKI expertise (X.509, OCSP, S/MIME), scripting skills (PowerShell, Python, Bash, Ansible), and English fluency. A five-year contract with attractive tax-free allowances and benefits awaits.