PKI Certificate Engineer

Fresenius Group; Wrocław; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Private medical health care

Multisport card

Life insurance

Employee pension program

Fruits in the office

Integration events

Social fund

Job summary

Fresenius Digital Technology is seeking a skilled PKI specialist to design, implement, and operate enterprise PKI and certificate management across on-premises and cloud environments.

You will automate issuance, renewal, revocation, and inventory, manage CAs, and collaborate with security and DevOps teams to ensure scalable machine identity solutions while supporting audits and compliance initiatives.

Qualifications

• Bachelor’s or master’s degree in computer science, information technology, engineering, or comparable qualification.
• Strong expertise in PKI, certificate management, cybersecurity, or related infrastructure security domains.
• Hands-on experience with certificate lifecycle management solutions and PKI technologies.

Responsibilities

• Design, implement, and maintain enterprise PKI and certificate management solutions across on-premises and cloud.
• Administer certificate lifecycle management platforms (e.g., Venafi, Keyfactor, DigiCert, AppViewX, or similar).
• Automate certificate issuance, renewal, revocation, and inventory processes.
• Manage internal and external Certificate Authorities (CAs).
• Support secure key management and cryptographic best practices.
• Integrate certificate management services with cloud, infrastructure, application, and DevOps platforms.
• Monitor certificate health, expiration risks, and compliance requirements.
• Troubleshoot and resolve certificate, encryption, and trust-related issues.
• Develop and maintain operational procedures, standards, and documentation.
• Collaborate with security, infrastructure, cloud, and application teams to implement scalable machine identity solutions.
• Support audits, regulatory requirements, and security compliance initiatives.

Skills

PKI

Certificate management

Automation

Scripting

Cloud platforms

DevOps

Troubleshooting

Analytical skills

English fluency

Education

Bachelor's or Master's in CS/IT/Engineering

Tools

Venafi

Keyfactor

DigiCert

AppViewX

Job description

Welcome to the IT Security team at Fresenius Digital Technology! We are responsible for the implementation, management and operation of programs, projects and services for a wide range of different security capabilities in various business segments within the Fresenius Group.

We are looking for a highly motivated team member who will be responsible for the design, implementation, operation, and continuous improvement of Public Key Infrastructure (PKI) and certificate lifecycle management services. In your new role you will focus on ensuring the security, availability, and automation of digital certificates and cryptographic services across on-premises and cloud environments.

You can look forward to a working environment that is as challenging as it is attractive. One that fits the ideal of a top workplace in so many respects - while expanding our own expert skills bank.

Your responsibilities:

• Design, implement, and maintain enterprise PKI and certificate management solutions
• Administer certificate lifecycle management platforms (e.g., Venafi, Keyfactor, DigiCert, AppViewX, or similar solutions)
• Automate certificate issuance, renewal, revocation, and inventory processes
• Manage internal and external Certificate Authorities (CAs)
• Support secure key management and cryptographic best practices
• Integrate certificate management services with cloud, infrastructure, application, and DevOps platforms
• Monitor certificate health, expiration risks, and compliance requirements
• Troubleshoot and resolve certificate, encryption, and trust-related issues
• Develop and maintain operational procedures, standards, and documentation
• Collaborate with security, infrastructure, cloud, and application teams to implement scalable machine identity solutions
• Support audits, regulatory requirements, and security compliance initiatives
• Bachelor’s or master’s degree in computer science, information technology, engineering, or comparable qualification
• Strong expertise in PKI, certificate management, cybersecurity, or related infrastructure security domains
• Strong hands-on experience with certificate lifecycle management solutions and PKI technologies
• Deep Knowledge of X.509 certificates, TLS/SSL, cryptographic protocols, and key management concepts
• Experience with automation and scripting technologies
• Familiarity with cloud platforms, enterprise infrastructure, and DevOps environments
• Strong analytical, troubleshooting, and problem-solving skills
• Fluent English skills required; German skills are an advantage

Our offer:

• Attractive conditions offered by a globally operating healthcare group
• Stable employment in a company with international environment
• Competitive salary (based on your experience)
• Benefit package (private medical health care, multisport card, life insurance, social fund, fruits in the office, integration events, employee pension program)
• Work in a modern office located in Wrocław city centre (pl. Nowy Targ) or from your home (we meet at the office once a week/twice a month depending where you are located)
• Excellent teamwork culture and friendly atmosphere