Certificate Lifecycle Management (CLM) Engineer

Blackfluo.ai; Paris; Sur place; EUR 60 000 - 80 000; Plein temps

Résumé du poste

A cybersecurity firm is seeking a Certificate Lifecycle Management Engineer to manage and optimize digital certificate lifecycles. The role includes overseeing certificate issuance, renewal, and compliance while developing automation workflows. Candidates should have over 6 years of experience in PKI environments and familiarity with tools like Venafi and DigiCert. This position emphasizes maintaining enterprise security and minimizing disruptions.

Qualifications

• 6+ years experience managing digital certificates and PKI environments.
• Familiarity with compliance related to encryption and certificate management.
• Experience integrating CLM tools into CI/CD pipelines.

Responsabilités

• Manage issuance, renewal, revocation, and replacement of digital certificates.
• Develop automation workflows for certificate requests, approvals, and renewals.
• Conduct audits and reporting on certificate usage and compliance.

Connaissances

Managing digital certificates

Hands-on experience with CLM tools

Strong understanding of X.509 and PKI

Proficiency in automation scripting

Outils

Venafi

DigiCert

Sectigo

Description du poste

Certificate Lifecycle Management (CLM) Engineer

About the job Certificate Lifecycle Management (CLM) Engineer

Certificate Lifecycle Management (CLM) Engineer

Managing and automating the lifecycle of digital certificates to ensure secure, reliable, and compliant encryption infrastructure

Position Overview
We are seeking a knowledgeable Certificate Lifecycle Management Engineer to administer and optimize the deployment, renewal, revocation, and monitoring of digital certificates using certificate lifecycle management tools. The role is critical to maintaining enterprise security, supporting PKI infrastructures, and preventing service disruptions related to certificate expiry.

Key Responsibilities

Certificate Lifecycle Administration

• Manage issuance, renewal, revocation, and replacement of digital certificates across enterprise environments
• Administer certificate lifecycle management tools such as Venafi, DigiCert CertCentral, Sectigo, or open-source alternatives
• Maintain integration of certificate management with applications, devices, and infrastructure components

Automation & Monitoring

• Develop and maintain automation workflows to streamline certificate requests, approvals, and renewals
• Monitor certificate health, expiration alerts, and compliance status across all managed certificates
• Respond to and resolve certificate-related incidents, outages, or misconfigurations promptly

Policy & Compliance

• Implement and enforce certificate policies and standards in accordance with organizational security and compliance requirements
• Collaborate with security teams to align PKI and certificate management with broader cybersecurity strategies
• Conduct audits and reporting on certificate usage, expirations, and policy adherence

Documentation & Training

• Document certificate management processes, configurations, and operational guidelines
• Provide training and support to application teams, developers, and system administrators on certificate usage and best practices
• Keep abreast of industry trends, vulnerabilities, and advances in certificate management

Required Qualifications

• 6+ years experience managing digital certificates and PKI environments
• Hands-on experience with certificate lifecycle management tools (e.g., Venafi, DigiCert, Sectigo)
• Strong understanding of X.509 certificates, SSL/TLS protocols, and public key infrastructure (PKI) concepts
• Proficiency in scripting or automation tools for certificate issuance and renewal processes
• Familiarity with compliance standards related to encryption and certificate management

Preferred Qualifications

• Certifications in cybersecurity or PKI management
• Experience with integrating CLM tools into CI/CD pipelines and DevOps workflows
• Knowledge of cloud-based certificate services (AWS Certificate Manager, Azure Key Vault)
• Background in incident response and security monitoring for cryptographic assets