Public Key Infrastructure (PKI) Operations Engineer

McKesson; Cork; On-site; EUR 53,000 - 88,000; Full time

Job summary

McKesson is seeking a Public Key Infrastructure (PKI) Operations Engineer in Cork, Ireland to manage certificate issuance, renewal, revocation, key recovery and related lifecycle activities.

You will monitor PKI health, respond to incidents within SLA, coordinate with apps teams, and contribute to runbooks, audits, and KPI reporting. 3–5 years PKI experience; base pay range €52,500–€87,500 annually.

Qualifications

• 3–5 years of hands‑on PKI experience and certificate management.
• Strong understanding of X.509 certificates, certificate authorities and trust hierarchies.
• Scripting for automation (PowerShell, Python, or Bash).
• Experience with PKI platforms and enrollment protocols.
• Familiarity with hardware security modules (HSMs).

Responsibilities

• Issue, renew, revoke certificates and perform key recovery per procedures.
• Monitor certificate lifecycles and coordinate renewals.
• Conduct PKI health checks and monitor infrastructure.
• Respond to PKI incidents within SLA timeframes.
• Troubleshoot validation, trust chain, and enrollment issues.
• Coordinate with apps teams to resolve service disruptions.
• Document root causes and preventive measures.
• Participate in on‑call rotations for 24/7 support.
• Ensure PKI ops comply with policies and industry standards.
• Maintain runbooks and SOPs; support audits.
• Track and report operational KPIs.

Skills

PKI experience

X.509 certificates

Certificate authorities

Automation scripting

HSM familiarity

Monitoring & logging

Tools

Microsoft ADCS

DigiCert

GlobalSign

SCEP CMPv2 ACME

Splunk

LogicMonitor

Grafana

Job description

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well‑being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

Public Key Infrastructure (PKI) Operations Engineer

Key Responsibilities

• Operational Support & Request Fulfillment: Execute certificate issuance, renewal, revocations, and key recovery operations according to established procedures.
• Manage certificate lifecycle activities including monitoring expiration dates and coordinating renewals.
• Perform routine health checks and monitoring of PKI infrastructure components.
• Respond to and resolve PKI-related incidents within defined SLA timeframes.
• Troubleshoot certificate validation failures, trust chain issues, and enrollment problems.
• Investigate and resolve alerts from PKI monitoring systems.
• Coordinate with applications teams to resolve certificate‑related service disruptions.
• Document incident root cases and implement preventive measures.
• Participate in rotating on‑call schedule to provide 24/7 support coverage, including responding to critical incidents during off‑hours with appropriate urgency.
• Ensure PKI operations comply with internal policies, Certificate practice statements, and industry standards.
• Maintain accurate operational documentation, runbooks and standard operating procedures.
• Support internal and external audit activities related to PKI operations.
• Track and report on operational metrics and KPIs.

Technical Skills

• 3–5 years of hands‑on experience with PKI technologies and certificate management.
• Strong understanding of X.509 certificates, certificate authorities and trust hierarchies.
• Proficiency with PKI platforms (Microsoft ADCS, DigiCert, GlobalSign, etc.).
• Experience with certificate enrollment protocols (SCEP, CMPv2, ACME).
• Familiarity with HSMs and their operational management.
• Understanding of certificate revocation mechanisms (CRL, OCSP).
• Basic scripting skills (PowerShell, Python or bash) for automation tasks.
• Experience with monitoring and logging tools (Splunk, Logic Monitor, Grafana).

Professional Experience

• Demonstrated experience in IT operations or security operations environments.
• Track record of working in shift‑based or on‑call rotation models.
• Experience with ITSM tools (ServiceNow, Remedy, Jira Service Management, etc.).
• Proven ability to handle multiple priorities and work under pressure.

Total Rewards

At McKesson, we care about the well‑being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well‑being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long‑term incentive opportunities, may be offered.

Our Base Pay Range for this position €52,500 - €87,500