PKI Management Engineer

Wipro; Województwo pomorskie; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Flexible benefits

Premium medical

Life & disability insurance

Pension plan

Social fund benefits

Events & recognition

Employee referrals

Relocation assistance

Inclusive culture

Job summary

Wipro in Gdansk, Poland, is seeking a Certificate Management Engineer to steward the enterprise certificate lifecycle across Venafi TPP, PKI, and automation platforms. The role covers policy config, renewal, discovery, CA integrations, and security governance within a hybrid working model with on-call rotations.

The candidate will manage PKI operations, TLS/SSL, code signing, and certificate provisioning while collaborating with security, infra and application teams to ensure compliance and

Qualifications

• Strong knowledge of PKI concepts and certificate lifecycle management.
• Hands-on experience with Venafi Trust Protection Platform (TPP).
• Experience with Microsoft Certificate Services (ADCS).
• SwissCert experience.
• Knowledge of SSL/TLS, X.509 certificates, CRL, OCSP, and cryptographic standards.
• Experience with SAML authentication and certificate-based authentication.
• Scripting skills in PowerShell, Python, or similar automation tools.
• Good understanding of Active Directory and RBAC concepts.
• Familiarity with Azure/Cloud certificate management.

Responsibilities

• Manage certificate issuance, renewal, replacement, and revocation processes.
• Monitor certificate expirations and ensure timely renewals.
• Maintain inventory and governance of internal and external certificates.
• Support TLS/SSL, client authentication, code signing, and other certificate types.
• Administer and maintain Venafi Trust Protection Platform (TPP). Configure policies, workflows, templates, and enrolment processes.
• Perform certificate discovery and monitoring activities.
• Manage integrations with internal and external Certificate Authorities (CAs).
• Support Microsoft PKI and Certificate Authority infrastructure.
• Troubleshoot certificate enrollment and trust-chain issues.
• Develop and maintain certificate automation workflows.
• Support API-based integrations with business applications and infrastructure platforms.
• Automate certificate deployment and renewal processes.
• Collaborate with application, infrastructure, and security teams for onboarding new services.
• Ensure compliance with organizational security standards and cryptographic policies.
• Support audit requirements and certificate compliance reporting.
• Maintain role-based access controls and privileged access management principles.
• Participate in security reviews and risk assessments.
• Handle certificate-related incidents and service requests.
• Support certificate-related changes through approved change management processes.
• Perform root cause analysis for certificate outages and authentication issues.
• Maintain operational documentation and knowledge articles.

Skills

PKI concepts

Venafi TPP

ADCS

SSL/TLS

X.509

SAML

PowerShell

Python

RBAC

Azure/Cloud

Tools

Venafi Trust Protection Platform (TPP)

Microsoft Certificate Services (ADCS)

SwissCert

Job description

With 900+ employees in Poland supporting over 45 clients, we leverage our holistic portfolio of capabilities in consulting, design, engineering, operations, and emerging technologies to help clients realize their boldest ambitions and build future-ready, sustainable businesses. It is the freedom provided to every individual at Wipro to learn, grow and create a career path that makes us an organization of opportunities beyond boundaries. Beyond boundaries of region, age, gender, ability and routine. We invite you to be a part of this experience!

Location and Work Mode: Gdansk, hybrid + on-call rotations

Type of Employment: We offer full time Contract of Employment (UoP) or B2B

About the role

The Certificate Management Engineer will be responsible for managing and supporting the enterprise certificate lifecycle management platform. The role includes administration of Venafi Trust Protection Platform (TPP), PKI infrastructure integration, certificate issuance, renewals, revocation, automation, governance, compliance, and operational support across internal and external certificate environments.

Key Responsibilities

Certificate Lifecycle Management

• Manage certificate issuance, renewal, replacement, and revocation processes.
• Monitor certificate expirations and ensure timely renewals.
• Maintain inventory and governance of internal and external certificates.
• Support TLS/SSL, client authentication, code signing, and other certificate types.

Venafi Administration

• Administer and maintain Venafi Trust Protection Platform (TPP). Configure policies, workflows, templates, and enrolment processes.
• Perform certificate discovery and monitoring activities.
• Manage integrations with internal and external Certificate Authorities (CAs).

PKI Operations

• Support Microsoft PKI and Certificate Authority infrastructure.
• Troubleshoot certificate enrollment and trust-chain issues.
• Manage CA integrations and certificate provisioning processes.
• Ensure secure handling of cryptographic certificates and keys.

Automation & Integration

• Develop and maintain certificate automation workflows.
• Support API-based integrations with business applications and infrastructure platforms.
• Automate certificate deployment and renewal processes.
• Collaborate with application, infrastructure, and security teams for onboarding new services.

Security & Compliance

• Ensure compliance with organizational security standards and cryptographic policies.
• Support audit requirements and certificate compliance reporting.
• Maintain role-based access controls and privileged access management principles.
• Participate in security reviews and risk assessments.

Incident & Change Management

• Handle certificate-related incidents and service requests.
• Support certificate-related changes through approved change management processes.
• Perform root cause analysis for certificate outages and authentication issues.
• Maintain operational documentation and knowledge articles.

Required Skills

• Strong knowledge of PKI concepts and certificate lifecycle management.
• Hands‑on experience with Venafi Trust Protection Platform (TPP).
• Experience with Microsoft Certificate Services (ADCS).
• SwissCert experience
• Knowledge of SSL/TLS, X.509 certificates, CRL, OCSP, and cryptographic standards.
• Experience with SAML authentication and certificate‑based authentication.
• Scripting skills in PowerShell, Python, or similar automation tools.
• Good understanding of Active Directory and RBAC concepts.
• Familiarity with Azure/Cloud certificate management.

Preferred Skills

• Experience in insurance or financial services environments.
• Knowledge of ITIL processes.
• Experience with ServiceNow and Change Management processes.
• Understanding of load balancers, web servers, and application security.
• Experience in audit and compliance environments.

What we offer

• Flexible benefits package tailored to your needs (Multisport card, shop vouchers, etc. – via MyBenefit cafeteria)
• Premium medical services for employees and family members (Luxmed)
• Life & Disability Insurance for employees and family members (Generali)
• Profitable Voluntary Pension Fund
• Social Fund benefits: holiday bonuses, kindergarten allowances, etc.
• Integration and cultural events for employees
• Reward and recognition programs for high performers
• Employee Referral bonuses
• Relocation assistance: accommodation, travel, and other covered expenses
• Friendly and inclusive company culture

Equal Opportunity Employer

Wipro is an Equal Opportunity Employer. We provide consideration for all qualified applicants regardless of race, color, religion, gender, marital status, age, ethnicity, national origin, sexual orientation, political views, disability, or any other characteristic protected by law.

Internal Reporting and Whistleblower Protection

Wipro IT Services Poland Sp. z o.o. adheres to the Internal Reporting and Whistleblower Protection Regulations. Candidates can submit internal reports via email to [e-mail], through the Internet at www.wiproombuds.com, or by post/courier to Wipro's registered office.