PKI & Certificate Lifecycle Engineer (AD CS)

Our Clients; Quezon City; On-site; PHP 1,000,000 - 1,300,000; Full time

Job summary

Our Clients in the Philippines is seeking a Certificate Management / Microsoft PKI Engineer responsible for administration and operational support of enterprise PKI and certificate services across on-premises and cloud environments.

This role focuses on day-to-day management of certificate lifecycles, including issuance, renewal, deployment, and rotation, ensuring service availability and compliance with security standards.

Qualifications

• 5–8+ years of experience in compute, infrastructure, systems administration, or a related technical environment.
• 3–5+ years of hands-on experience managing PKI and enterprise certificate services.
• Strong background in Windows infrastructure (Wintel) environments.
• Hands-on experience with certificate issuance and renewal, internal and external certificates, and enterprise certificate lifecycle operations.
• Strong understanding of X.509 certificates, TLS/HTTPS, certificate chains, and trust models.
• Experience administering Microsoft Active Directory Certificate Services (AD CS) and/or enterprise PKI platforms.
• Hands-on experience deploying certificates across enterprise server and application environments.
• Working knowledge of PowerShell and/or basic Python or shell scripting.
• Familiarity with IT service management tools and processes.

Responsibilities

• Administer and support enterprise PKI and certificate management services across on-premises and cloud environments.
• Manage the full certificate lifecycle, including issuance, deployment, renewal, rotation, revocation, and troubleshooting.
• Support both internal and externally issued digital certificates.
• Monitor certificate validity and expiration to prevent service disruptions.
• Ensure certificate operations follow established security standards, policies, and procedures.
• Administer Microsoft Active Directory Certificate Services (AD CS) and/or other PKI platforms.
• Troubleshoot certificate chains, trust relationships, TLS/HTTPS issues, and related incidents.
• Deploy certificates across Windows and Linux servers, IIS, Apache, Nginx, and load balancers.
• Collaborate with cross-functional teams to resolve issues and meet operational requirements.

Skills

PKI administration

Windows infrastructure

Scripting (PowerShell)

Certificate lifecycle management

TLS/HTTPS knowledge

ITSM familiarity

Cross-functional collaboration

Tools

AD CS

Venafi

Keyfactor

AppViewX

DigiCert

Sectigo

ServiceNow

Job description

Our Clients in the Philippines is seeking a Certificate Management / Microsoft PKI Engineer responsible for administration and operational support of enterprise PKI and certificate services across on-premises and cloud environments.

This role focuses on day-to-day management of certificate lifecycles, including issuance, renewal, deployment, and rotation, ensuring service availability and compliance with security standards.