Certificate & Secrets Governance Lead

AdvanceWorks; Lisboa; Hybrid; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Mentorship program

Rubber Duck support

Cutting-edge tools

Flexible culture

Job summary

AdvanceWorks in Lisbon seeks a Certificate & Secrets Management professional to lead governance and automation for centralized certificate and secrets management within a large financial organization.

You will define processes, implement controls, and collaborate with Security, Infra, DevOps, Applications and Operations teams to reduce risk and improve operational visibility across the lifecycle of certificates, SPNs, tokens and identities.

Qualifications

• 5+ years of experience in IT, cybersecurity, infrastructure, identity management or related field.
• Hands-on experience with digital certificates, PKI, SSL/TLS and mTLS.
• Solid understanding of SPNs, technical identities, service accounts, tokens and application secrets.
• Experience with HashiCorp Vault or equivalent secrets management platforms.
• Strong understanding of certificate and secrets lifecycle management.
• Experience with IT processes, governance models and operational KPIs.
• Experience with automation and scripting (Python, Bash or PowerShell).
• Knowledge of cloud platforms and their identity, certificate and secrets management capabilities.

Responsibilities

• Review current processes for managing certificates, SPNs, tokens, secrets and technical identities.
• Define target processes and governance for centralized certificate and secrets management.
• Establish ownership, responsibilities, approvals, controls and escalation mechanisms.
• Design and improve end-to-end lifecycle management of certificates and secrets (creation, renewal, rotation, revocation).
• Maintain centralized inventory of certificates, secrets and identities with ownership and dependencies.
• Implement observability and alerts for expiration and lifecycle events.
• Automate discovery, registration, monitoring, renewal and rotation processes.
• Integrate with Vault, CMDB, ServiceNow, cloud platforms, API Gateways and CI/CD pipelines.
• Define KPIs, governance, documentation and runbooks.

Skills

PKI

Secrets management

Automation

Stakeholder management

English & Portuguese

Tools

HashiCorp Vault

ServiceNow

CMDB

Job description

AdvanceWorks in Lisbon seeks a Certificate & Secrets Management professional to lead governance and automation for centralized certificate and secrets management within a large financial organization.

You will define processes, implement controls, and collaborate with Security, Infra, DevOps, Applications and Operations teams to reduce risk and improve operational visibility across the lifecycle of certificates, SPNs, tokens and identities.