Senior Microsoft PKI & Certificate Management Engineer

Optum; Philippines; Presencial; PHP 600.000 - 1.000.000; Jornada completa

Descripción de la vacante

Optum is hiring a Certificate Mgmt/Microsoft PKI Engineer to design, administer, and manage enterprise PKI infrastructure. The role covers Root/Issuing CAs, certificate lifecycle, and integration with automation tools to improve reliability.

Focus is on operational efficiency, not software development, with audits and compliance responsibilities. The engineer will work across Windows and Linux servers, web servers, and load balancers, ensuring secure TLS standards and scalable certificate

Formación

• 5+ years in compute, infrastructure, or systems administration.
• 3+ years hands on PKI and certificate services.
• Experience administering Microsoft AD CS or enterprise PKI tools.
• Hands on experience deploying certificates to Windows/Linux, IIS/Apache/Nginx.
• Familiarity with X.509, TLS/HTTPS, and trust models.
• Proficiency with scripting for automation (PowerShell, Python, shell).

Responsabilidades

• Certificate & PKI administration for enterprise infrastructure.
• Manage certificate issuance, renewal, revocation, and retirement for internal and external certs.
• Operate and monitor CRL, OCSP, and certificate distribution endpoints.
• Automation & operational enablement for certificate-related tasks.
• Integrate certificate management into infrastructure workflows and runbooks.
• Maintain documentation and support audits (SOX, PCI, ISO).

Conocimientos

Certificate management

PKI administration

TLS/HTTPS

PowerShell

Python

Windows/Linux administration

Educación

5+ years in compute/infrastructure

3+ years PKI in production

Herramientas

Venafi

Keyfactor

AppViewX

DigiCert

Sectigo

Descripción del empleo

Optum is hiring a Certificate Mgmt/Microsoft PKI Engineer to design, administer, and manage enterprise PKI infrastructure. The role covers Root/Issuing CAs, certificate lifecycle, and integration with automation tools to improve reliability.

Focus is on operational efficiency, not software development, with audits and compliance responsibilities. The engineer will work across Windows and Linux servers, web servers, and load balancers, ensuring secure TLS standards and scalable certificate