Role & responsibilities :
Enterprise Certificate Operations Engineer DigiCert / PKI
Job Summary
We are looking for an Enterprise Certificate Operations Engineer with strong hands‑on experience in DigiCert CertCentral, PKI, SSL/TLS certificate lifecycle management, and enterprise certificate operations.
The role will be responsible for managing enterprise certificates, supporting PKI integrations and automation, troubleshooting certificate‑related issues, and collaborating with Security, Infrastructure, Application, and EUC teams to ensure secure and reliable certificate services across the organization.
Key Responsibilities
Certificate Management & Operations
- Manage certificate issuance, renewal, revocation, deployment, and inventory using DigiCert CertCentral.
- Monitor certificate expiry and proactively coordinate renewals to prevent service disruptions.
- Support certificate deployment, validation, and troubleshooting across enterprise applications, servers, and endpoints.
- Maintain certificate inventory, compliance reports, documentation, and audit readiness.
PKI Integration & Automation
- Support integration of DigiCert certificate services with enterprise platforms such as Microsoft Intune, ManageEngine, Jamf, and other third‑party solutions.
- Support DigiCert API integrations and certificate lifecycle automation.
- Work with Infrastructure, Application, Security, and Development teams on certificate implementation and integration requirements.
- Support client certificate management, authentication, and certificate‑based security solutions.
PKI Consulting & Documentation
- Provide PKI and enterprise certificate management guidance to project teams and stakeholders.
- Support certificate architecture reviews, onboarding, implementation, and best‑practice recommendations.
- Create and maintain operational procedures, knowledge articles, implementation guides, and technical documentation.
EUC & Endpoint Support – Secondary Responsibility
- Support certificate deployment and management through Intune, ManageEngine, Jamf, Workspace ONE, or similar MDM platforms.
- Assist with endpoint certificate compliance and device certificate management.
- Support endpoint security and compliance initiatives in coordination with EUC teams.
- Collaborate with teams supporting AV/EDR, DLP, encryption, internet security, and other endpoint security solutions.
Required Skills & Experience
- 3–5 years of relevant experience in Certificate Management, PKI Operations, Enterprise Security, or Endpoint Management.
- Hands‑on experience with DigiCert CertCentral is highly preferred.
- Strong understanding of PKI, SSL/TLS, CSR generation, certificate chains, and certificate lifecycle management.
- Experience with certificate issuance, renewal, revocation, expiry monitoring, and enterprise deployment.
- Experience with enterprise certificate integration and troubleshooting.
- Knowledge of DigiCert APIs and certificate lifecycle automation.
- Understanding of client certificates and certificate‑based authentication.
- Experience with ServiceNow or similar ITSM tools.
- Strong troubleshooting, analytical, communication, and stakeholder management skills.
Preferred Skills
- DigiCert CertCentral Enterprise experience.
- DigiCert API integration and automation experience.
- Experience with Intune, Jamf, ManageEngine, Workspace ONE, or similar MDM platforms.
- Knowledge of SCEP, PKCS, ACME, and certificate enrollment technologies.
- Scripting experience with PowerShell, Python, Java, or similar technologies.
- Familiarity with endpoint security solutions such as CrowdStrike, Zscaler, ManageEngine, etc.
- Understanding of device compliance and certificate‑based endpoint authentication.
- ITIL Foundation certification.
Education
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.
Experience
3–5 Years
Key Skills for Naukri
DigiCert | CertCentral | PKI | Certificate Management | SSL/TLS | Digital Certificates | Certificate Lifecycle Management | PKI Operations | CSR | SCEP | PKCS | ACME | DigiCert API | Intune | Jamf | ManageEngine | Workspace ONE | Endpoint Security | ServiceNow | Certificate Automation