Lead TLS & PKI Engineer — Multi-Cloud

Publicis Groupe ANZ; Hinoba-an; Hybrid; PHP 1,500,000 - 2,300,000; Full time

Job summary

Epsilon is seeking a Lead TLS & PKI Engineer to drive enterprise TLS and certificate lifecycle across multi-cloud environments. You will own inventory, renewal automation, trust-chain management, and TLS observability while mentoring engineers and collaborating with Security, Network, Cloud, and application teams.

You will implement cloud-native certificate patterns and IaC-driven workflows, improving renewal processes and reducing outages through automation and standardized runbooks.

Qualifications

• 7+ years in infrastructure, security, or platform ops roles with PKI/TLS focus.

Responsibilities

• Provide technical leadership for enterprise TLS and PKI operations.
• Advise on server TLS, mTLS, and certificate trust models.
• Maintain knowledge of industry trends in certificate lifetimes and automation.
• Partner with Security, Network, and Cloud teams on PKI policy and governance.
• Own end-to-end certificate lifecycle workflows: issuance, renewal, revocation, inventory.
• Design renewal automation with APIs and ACME or vendor-native methods.
• Implement and govern cloud-native certificate patterns across AWS, Azure, GCP.
• Deliver IaC-based certificate provisioning and rotation for load balancers and edge platforms.
• Lead mTLS and trust-chain coordination with cross-team stakeholders.
• Define TLS monitoring signals and build dashboards for lifecycle observability.
• Mentor engineers on TLS/PKI fundamentals and best practices.
• Participate in on-call rotation for production TLS incidents.

Skills

TLS expertise

PKI

Certificate lifecycle

Automation

Cloud security

Mentoring

Incident response

On-call rotation

Terraform (IaC)

Load balancer integration

Tools

Venafi

DigiCert CLM

Sectigo CLM

ACM

Azure Key Vault

Certificate Manager

Terraform

Job description

Epsilon is seeking a Lead TLS & PKI Engineer to drive enterprise TLS and certificate lifecycle across multi-cloud environments. You will own inventory, renewal automation, trust-chain management, and TLS observability while mentoring engineers and collaborating with Security, Network, Cloud, and application teams.

You will implement cloud-native certificate patterns and IaC-driven workflows, improving renewal processes and reducing outages through automation and standardized runbooks.