PKI Operations Engineer — 24/7 Certificate Lifecycle Expert

Mckesson Corporation; Cork; A distancia; EUR 53.000 - 88.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Shift allowance

Total Rewards package

Descripción de la vacante

McKesson Ireland is seeking a Public Key Infrastructure Operations Engineer to join our Enterprise Digital Certificate Management team in Cork. You will own day-to-day PKI operations, handle certificate requests, renewals, revocations, and participate in on-call rotations to ensure 24/7 availability of our PKI services.

Qualified candidates have 3–5 years of hands-on PKI experience, familiarity with X.509 and PKI platforms (ADCS, DigiCert, GlobalSign), scripting for automation, and experience

Formación

• 3–5 years of hands-on PKI experience.
• Strong understanding of X.509 certificates and trust hierarchies.
• Proficiency with PKI platforms (Microsoft ADCS, DigiCert, GlobalSign).
• Experience with certificate enrollment protocols (SCEP, CMPv2, ACME).
• Familiarity with HSMs and their management.
• Basic scripting (PowerShell, Python or Bash) for automation.
• Experience with monitoring and logging tools (Splunk, Grafana).

Responsabilidades

• Execute certificate issuance, renewal, revocation, and key recovery operations.
• Manage certificate lifecycle activities including expirations and renewals.
• Perform health checks and monitoring of PKI infrastructure.
• Respond to PKI incidents within SLA.
• Coordinate with application teams to resolve certificate-related disruptions.
• Document root causes and preventive measures.

Conocimientos

PKI technologies

X.509 certificates

PKI platforms

Enrollment protocols

PowerShell

Scripting for automation

Monitoring tools

Herramientas

Splunk

Logic Monitor

Grafana

ServiceNow/Jira Service Management

Descripción del empleo

McKesson Ireland is seeking a Public Key Infrastructure Operations Engineer to join our Enterprise Digital Certificate Management team in Cork. You will own day-to-day PKI operations, handle certificate requests, renewals, revocations, and participate in on-call rotations to ensure 24/7 availability of our PKI services.

Qualified candidates have 3–5 years of hands-on PKI experience, familiarity with X.509 and PKI platforms (ADCS, DigiCert, GlobalSign), scripting for automation, and experience