Certificate Lifecycle Management (CLM) Engineer

Blackfluo.ai; Paris; Sur place; EUR 60 000 - 80 000; Plein temps

Résumé du poste

A cybersecurity solutions provider in Paris is seeking a knowledgeable Certificate Lifecycle Management Engineer. This role involves managing the lifecycle of digital certificates, developing automation workflows, and ensuring compliance with security policies. Ideal candidates will have over 6 years of experience in PKI management and expertise in tools like Venafi and DigiCert. The position plays a critical role in maintaining enterprise security and preventing service disruptions.

Qualifications

• 6+ years experience managing digital certificates and PKI environments.
• Hands-on experience with certificate lifecycle management tools.
• Strong understanding of X.509 certificates and SSL/TLS protocols.

Responsabilités

• Manage issuance, renewal, revocation of digital certificates.
• Develop and maintain automation workflows for certificate processes.
• Implement and enforce certificate policies according to compliance.

Connaissances

Certificate management

PKI management

Scripting for automation

Compliance standards knowledge

Outils

Venafi

DigiCert

Sectigo

Description du poste

Certificate Lifecycle Management (CLM) Engineer

About the job Certificate Lifecycle Management (CLM) Engineer

Certificate Lifecycle Management (CLM) Engineer

Managing and automating the lifecycle of digital certificates to ensure secure, reliable, and compliant encryption infrastructure

Position Overview
We are seeking a knowledgeable Certificate Lifecycle Management Engineer to administer and optimize the deployment, renewal, revocation, and monitoring of digital certificates using certificate lifecycle management tools. The role is critical to maintaining enterprise security, supporting PKI infrastructures, and preventing service disruptions related to certificate expiry.

Key Responsibilities

Certificate Lifecycle Administration

• Manage issuance, renewal, revocation, and replacement of digital certificates across enterprise environments
• Administer certificate lifecycle management tools such as Venafi, DigiCert CertCentral, Sectigo, or open-source alternatives
• Maintain integration of certificate management with applications, devices, and infrastructure components

Automation & Monitoring

• Develop and maintain automation workflows to streamline certificate requests, approvals, and renewals
• Monitor certificate health, expiration alerts, and compliance status across all managed certificates
• Respond to and resolve certificate-related incidents, outages, or misconfigurations promptly

Policy & Compliance

• Implement and enforce certificate policies and standards in accordance with organizational security and compliance requirements
• Collaborate with security teams to align PKI and certificate management with broader cybersecurity strategies
• Conduct audits and reporting on certificate usage, expirations, and policy adherence

Documentation & Training

• Document certificate management processes, configurations, and operational guidelines
• Provide training and support to application teams, developers, and system administrators on certificate usage and best practices
• Keep abreast of industry trends, vulnerabilities, and advances in certificate management

Required Qualifications

• 6+ years experience managing digital certificates and PKI environments
• Hands-on experience with certificate lifecycle management tools (e.g., Venafi, DigiCert, Sectigo)
• Strong understanding of X.509 certificates, SSL/TLS protocols, and public key infrastructure (PKI) concepts
• Proficiency in scripting or automation tools for certificate issuance and renewal processes
• Familiarity with compliance standards related to encryption and certificate management

Preferred Qualifications

C

• C

  ertifications in cybersecurity or PKI management
• Experience with integrating CLM tools into CI/CD pipelines and DevOps workflows
• Knowledge of cloud-based certificate services (AWS Certificate Manager, Azure Key Vault)
• Background in incident response and security monitoring for cryptographic assets