PKI-CLM Engineer (Managed Services)

Nomios Group; Leiden; On-site; EUR 55,000 - 70,000; Full time

Benefits offered by this job

Health insurance

Retirement plans

Paid time off

Continuous learning opportunities

Job summary

Nomios Group is looking for a Managed Services Engineer in Leiden, Netherlands. In this role, you will be responsible for managing PKI-CLM infrastructures, ensuring high availability and security for our clients. Ideal candidates should have at least 5 years of experience, a Bachelor’s degree, and excellent skills in both Dutch and English. The position offers opportunities for professional growth and a comprehensive benefits package, including health insurance and retirement plans.

Qualifications

• Minimum of 5 years in a similar role, preferably with an ISP or Cloud Service Provider.
• Strong problem-solving skills and ability to work under pressure.
• Excellent communication skills in Dutch and English.

Responsibilities

• Oversee and ensure high availability of PKI-CLM infrastructures.
• Enhance security management for public keys and certificates.
• Monitor PKI-CLM systems to quickly resolve issues.
• Provide technical support to clients for functional or security issues.
• Create and maintain documentation for configurations and procedures.

Skills

General knowledge of PKI-CLM infrastructures

Good knowledge of network vendors (Juniper, Cisco, Arista, or Nokia)

Familiarity with network protocols (TCP/IP, BGP, OSPF, MPLS, VLAN, VPN, IPSec)

Understanding of security protocols (SSL/TLS, SSH)

Experience as a Windows or Linux administrator

Diagnosis of Windows Server platforms and Microsoft SQL Server clusters

PowerShell scripting

Kubernetes

Load balancing

Virtualization

Education

Bachelor’s degree

Minimum 5 years of experience in a similar role

Tools

Keyfactor EJBCA

Venafi Security Administrator (VSA)

Microsoft Azure AZ-104

Job description

We are Nomios! At Nomios, we are dedicated to delivering cutting‑edge network and security solutions that drive the success of businesses worldwide. As a leading provider of network infrastructures and security solutions, we take pride in our innovative approach and our pursuit of perfection. Our team is passionate, skilled, and always ready to tackle new challenges.

We are currently seeking experienced Managed Services Engineers to strengthen our dynamic team. In this role, you will be responsible for comprehensive management of Public Key and Certificate Lifecycle Management (PKI‑CLM) infrastructures for our clients. You’ll work with leading technologies from vendors such as Keyfactor, Venafi, and Thales to ensure optimal performance, security, and reliability.

General Responsibilities

• PKI-CLM Infrastructure Management: Oversee and ensure high availability and performance of these infrastructures for clients.
• Security Management: Maintain and enhance security management related to the exchange and storage of public keys and certificates.
• Monitoring and Maintenance: Continuously monitor PKI‑CLM systems and their security to quickly detect and resolve issues.
• Incident Response: Resolve incidents by conducting analyses and implementing corrective measures to prevent recurrence.
• Customer Support: Provide adequate technical support, addressing functional or security issues for clients.
• Documentation: Create and maintain documentation on configurations, policies, and operational procedures.
• Collaboration: Work closely with engineers, IT staff, and clients to execute management tasks as expected.
• Training and Development: Mentor and train junior engineers, sharing best practices with clients.
• Daily Operations Management: Manage configuration, lifecycle, capacity, and performance of PKI‑CLM infrastructures.
• SLA Compliance: Ensure compliance with Service Level Agreements (SLAs) and Key Performance Indicators (KPIs) for clients.
• Service Reviews and Reporting: Contribute to regular service reviews and reports for clients in collaboration with Service Delivery Managers.
• Change Management: Plan, execute, and document customer‑requested changes and participate in Change Advisory Board (CAB) meetings.

Job Requirements

Technical Skills

• General knowledge of PKI‑CLM infrastructures.
• Good knowledge of one or more network vendors (Juniper, Cisco, Arista, or Nokia).
• Familiarity with network protocols (TCP/IP, BGP, OSPF, MPLS, VLAN, VPN, and IPSec).
• Understanding of security protocols such as SSL/TLS and SSH.
• Experience as a Windows or Linux administrator.
• Diagnosis of Windows Server platforms and Microsoft SQL Server clusters.
• Preferably familiar with:
  • Keyfactor applications and diagnostics.
  • Venafi machine identification applications.
  • Thales Luna HSM applications and diagnostics.

Additional Preferred Knowledge

• PowerShell scripting.
• Kubernetes.
• Load balancing.
• Virtualization.

Certifications

• Relevant certifications are advantageous, such as:
  • Keyfactor EJBCA.
  • Venafi Security Administrator (VSA).
  • Microsoft Azure AZ‑104.

Soft Skills

• Excellent problem‑solving skills, attention to detail, and ability to work under pressure.
• Strong written and verbal communication skills in Dutch (mandatory) and English.
• Possession of a valid driver’s license (Category B).

Education and Experience

• Relevant experience: Minimum of 5 years in a similar role, preferably with an Internet Service Provider (ISP) or Cloud Service Provider.
• Educational background: Bachelor’s degree.

Why Join Nomios?

• Innovative Environment: Work with the latest technologies and industry‑leading solutions.
• Professional Growth: Opportunities for continuous learning, certifications, and career advancement.
• Collaborative Team: Join a supportive and skilled team of network professionals.
• Competitive Benefits: Enjoy a comprehensive benefits package, including health insurance, retirement plans, and paid time off.
• Impactful Work: Contribute to exciting projects that make a real difference for our clients.