Certificate Management / Microsoft PKI Engineer

Create Synergies Inc.

Quezon City

On-site

PHP 900,000 - 1,500,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Create Synergies Inc. in Metro Manila is seeking a Certificate Management / Microsoft PKI Engineer to administer and support enterprise PKI across on-prem and cloud environments.

You will manage certificate lifecycles, issuance, renewal, deployment and rotation while enforcing security standards. Collaborate with infrastructure, network, security and application teams to prevent disruptions, troubleshoot TLS/HTTPS and trust issues, and automate repetitive tasks with PowerShell or script-based

Qualifications

5–8+ years in compute or infrastructure environments.
3–5+ years managing PKI and enterprise certificates.
Strong Windows (Wintel) background.
Experience with AD CS and PKI platforms.
Understanding of TLS/HTTPS, X.509 and trust models.

Responsibilities

Administer and support enterprise PKI and certificate management across on‑premises and cloud environments.
Manage the full certificate lifecycle including issuance, deployment, renewal, rotation, revocation and troubleshooting.
Monitor certificate validity to prevent service disruptions.
Troubleshoot certificate chains, TLS/HTTPS issues and trust relationships.
Collaborate with infrastructure, network, security and application teams to resolve certificate‑related issues.
Ensure renewals and rotations occur within required timelines to maintain service continuity.

Skills

PKI administration

Certificate lifecycle management

Windows infrastructure

Scripting (PowerShell)

ITSM tools

Cross-functional collaboration

Attention to detail

Tools

Venafi

Keyfactor

AppViewX

DigiCert

Sectigo

ServiceNow

Job description

Role Overview

The Certificate Management / Microsoft PKI Engineer is responsible for the administration and operational support of enterprise Public Key Infrastructure (PKI) and certificate services across on‑premises and cloud environments. This is an infrastructure administration and operations role rather than a software development position. The role focuses on the day‑to‑day management of certificate lifecycles, including issuance, renewal, deployment, rotation, troubleshooting and controlled automation. The successful candidate will help maintain service availability while ensuring certificate operations comply with enterprise security standards. The position works closely with infrastructure, network, security and application teams to ensure certificates are managed proactively, renewed or rotated on time, thereby reducing manual effort and operational risk.

Key Responsibilities

PKI & Certificate Lifecycle Management

Administer and support enterprise PKI and certificate management services across on‑premises and cloud environments.
Manage the full certificate lifecycle, including issuance, deployment, renewal, rotation, revocation and troubleshooting.
Support both internal and externally issued digital certificates.
Monitor certificate validity and expiration to prevent certificate‑related service disruptions.
Ensure certificate operations follow established security standards, policies and operational procedures.

Microsoft PKI Administration

Administer Microsoft Active Directory Certificate Services (AD CS) and/or other enterprise PKI platforms.
Support certificate deployment and management across enterprise infrastructure environments.
Troubleshoot certificate chains, trust relationships, TLS/HTTPS issues and other certificate‑related incidents.
Support certificate implementation across Windows and Linux servers and relevant application or infrastructure platforms.

Certificate Deployment & Infrastructure Support

Deploy and manage certificates across technologies such as:
- Windows and Linux servers
- IIS
- Apache
- Nginx
- Load balancers
- Reverse proxies
Collaborate with infrastructure, network, security and application teams to resolve certificate‑related issues and support operational requirements.
Ensure certificates are renewed and rotated within required timelines to maintain service continuity.

Automation & Operational Improvement

Support controlled automation of repetitive certificate management activities to reduce manual intervention and operational risk.
Use scripting technologies to improve certificate administration, monitoring and lifecycle processes.
Contribute to continuous improvement of PKI and certificate management procedures.
Manage incidents, service requests and operational activities using established IT service management processes and tools.

Qualifications

Required

5–8+ years of experience in compute, infrastructure, systems administration or a related technical environment.
3–5+ years of hands‑on experience managing PKI and enterprise certificate services.
Strong background and practical experience in Windows infrastructure (Wintel) environments.
Hands‑on experience managing:
- Certificate issuance and renewal
- Internal and external certificates
- Enterprise certificate lifecycle operations
Strong understanding of:
- X.509 certificates
- TLS/HTTPS
- Certificate chains
- Trust models
Experience administering Microsoft Active Directory Certificate Services (AD CS) and/or enterprise PKI platforms.
Hands‑on experience deploying certificates across enterprise server and application environments.
Working knowledge of PowerShell and/or basic Python or shell scripting.
Familiarity with IT service management tools and processes.