Lead TLS & PKI Engineer: Cloud Trust Automation

Publicis Groupe; Hinoba-an; Hybrid; PHP 1,800,000 - 2,400,000; Full time

Job summary

Epsilon is seeking a Lead TLS & PKI Engineer to drive enterprise TLS and certificate lifecycle strategy across on-prem, hybrid, and multi-cloud environments. You will collaborate with Security, Network, Cloud, and Application teams to implement automation, inventory accuracy, and trusted certificate patterns.

The role emphasizes hands-on leadership, mentoring, and incident response for TLS-related production issues. Strong automation, IaC, and cloud certificate experience are essential.

Qualifications

• 7+ years in infrastructure, security engineering, network engineering, or platform operations.
• 3+ years focused on PKI, TLS, or certificate lifecycle management in production.
• Deep TLS knowledge, X.509, and PKI deployment patterns.

Responsibilities

• Provide technical leadership for enterprise TLS and PKI operations across on-prem, hybrid, and multi-cloud environments.
• Design renewal automation and inventory workflows to reduce expirations and drift.
• Build and maintain cloud-native certificate patterns across AWS, Azure, and GCP; guide teams on best practices.

Skills

TLS 1.2/1.3

PKI

Certificate lifecycle

mTLS

Venafi

Terraform

Cloud certificate services

Load balancers

Education

Bachelor's degree in a relevant field

Tools

Venafi

DigiCert/Sectigo CLM

AWS ACM

Azure Key Vault

GCP Certificate Manager

Terraform

Job description

Epsilon is seeking a Lead TLS & PKI Engineer to drive enterprise TLS and certificate lifecycle strategy across on-prem, hybrid, and multi-cloud environments. You will collaborate with Security, Network, Cloud, and Application teams to implement automation, inventory accuracy, and trusted certificate patterns.

The role emphasizes hands-on leadership, mentoring, and incident response for TLS-related production issues. Strong automation, IaC, and cloud certificate experience are essential.