Certificate & Secrets Manager

AdvanceWorks; Lisboa; Hybrid; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Mentorship program

Rubber Duck support

Cutting-edge tools

Flexible culture

Job summary

AdvanceWorks in Lisbon seeks a Certificate & Secrets Management professional to lead governance and automation for centralized certificate and secrets management within a large financial organization.

You will define processes, implement controls, and collaborate with Security, Infra, DevOps, Applications and Operations teams to reduce risk and improve operational visibility across the lifecycle of certificates, SPNs, tokens and identities.

Qualifications

• 5+ years of experience in IT, cybersecurity, infrastructure, identity management or related field.
• Hands-on experience with digital certificates, PKI, SSL/TLS and mTLS.
• Solid understanding of SPNs, technical identities, service accounts, tokens and application secrets.
• Experience with HashiCorp Vault or equivalent secrets management platforms.
• Strong understanding of certificate and secrets lifecycle management.
• Experience with IT processes, governance models and operational KPIs.
• Experience with automation and scripting (Python, Bash or PowerShell).
• Knowledge of cloud platforms and their identity, certificate and secrets management capabilities.

Responsibilities

• Review current processes for managing certificates, SPNs, tokens, secrets and technical identities.
• Define target processes and governance for centralized certificate and secrets management.
• Establish ownership, responsibilities, approvals, controls and escalation mechanisms.
• Design and improve end-to-end lifecycle management of certificates and secrets (creation, renewal, rotation, revocation).
• Maintain centralized inventory of certificates, secrets and identities with ownership and dependencies.
• Implement observability and alerts for expiration and lifecycle events.
• Automate discovery, registration, monitoring, renewal and rotation processes.
• Integrate with Vault, CMDB, ServiceNow, cloud platforms, API Gateways and CI/CD pipelines.
• Define KPIs, governance, documentation and runbooks.

Skills

PKI

Secrets management

Automation

Stakeholder management

English & Portuguese

Tools

HashiCorp Vault

ServiceNow

CMDB

Job description

At AdvanceWorks, we learn together, grow together, and have fun together. And we do all this while creating great technology solutions for clients across many industries and geographies.

We are constantly challenging ourselves and each other to use the latest technologies and the best methodologies, while making sure we walk the talk.

What will be your role

We are looking for a Certificate & Secrets Management to join our team in Lisbon and contribute to a strategic security and operational governance initiative within a large financial organization.

The project focuses on the centralization and consolidation of certificate, secrets and technical identity management, with the goal of improving security, governance, operational visibility and reducing the risk of service disruptions caused by expired certificates, credentials or authentication mechanisms.

You’ll be working across a complex enterprise environment, helping define and implement the processes, governance model, controls and automation required to manage certificates, SPNs, tokens, secrets and technical identities throughout their lifecycle.

This is not a purely operational role. You’ll be expected to combine technical knowledge with process design, governance, stakeholder management and automation, working closely with Security, Infrastructure, DevOps, Application and Operations teams.

Your responsibilities will include

• Reviewing and assessing the current processes for managing certificates, SPNs, tokens, secrets and technical identities
• Defining target processes and the governance model for centralized certificate and secrets management
• Establishing clear ownership, responsibilities, approvals, controls and escalation mechanisms
• Designing and improving the end-to-end lifecycle management of certificates and secrets, including creation, registration, usage, renewal, rotation, revocation and decommissioning
• Defining and maintaining a centralized inventory of certificates, secrets and technical identities, including ownership, application, service, environment, validity, criticality and dependencies
• Implementing observability and alerting mechanisms to provide visibility over certificate, SPN, token and secret expiration and lifecycle events
• Supporting the automation of discovery, registration, monitoring, renewal and rotation processes
• Integrating certificate and secrets management capabilities with enterprise platforms such as Vault, CMDB, ServiceNow, cloud platforms, API Gateways and CI/CD pipelines
• Defining operational controls, KPIs and reporting mechanisms to improve governance and reduce operational risk
• Producing operational documentation, procedures, runbooks and governance documentation
• Working closely with Security, Infrastructure, DevOps, Application, Release Management and Operations teams
• Identifying operational risks and opportunities for improvement across the certificate and secrets management lifecycle
• Supporting the continuous improvement and consolidation of the overall certificate and secrets management capability

What should you bring to the team

• 5+ years of experience in IT, cybersecurity, infrastructure, identity management or a related technical domain
• Hands-on experience with digital certificates, PKI, SSL/TLS and mTLS
• Solid understanding of SPNs, technical identities, service accounts, tokens and application secrets
• Experience with HashiCorp Vault or equivalent secrets management platforms
• Strong understanding of certificate and secrets lifecycle management
• Experience defining or improving IT processes, governance models, RACI matrices, controls and operational KPIs
• Experience with automation and scripting using technologies such as Python, Bash or PowerShell
• Good understanding of APIs and enterprise system integrations
• Familiarity with ServiceNow and CMDB environments
• Knowledge of cloud platforms and their identity, certificate and secrets management capabilities
• Familiarity with API Gateways and CI/CD pipelines
• Understanding of application security, authentication mechanisms and operational risk management
• Experience working in complex enterprise environments
• Strong stakeholder management and communication skills, with the ability to work across technical and security teams
• Strong documentation skills and ability to create clear operational procedures and runbooks
• Fluent Portuguese and English, both written and spoken
• Availability to work in a hybrid model in Lisbon

Nice to have

• Experience in banking, financial services or other highly regulated environments
• Experience with enterprise PKI environments and certificate authorities
• Experience implementing or consolidating centralized certificate or secrets management capabilities
• Experience with HashiCorp Vault, Azure Key Vault or similar technologies
• Experience integrating security platforms through APIs
• Experience with ServiceNow workflows and CMDB integration
• Knowledge of identity and access management concepts
• Familiarity with DevSecOps practices
• Experience implementing monitoring and observability solutions
• Experience with infrastructure or application automation
• Knowledge of compliance and security control frameworks

What is in it for you

• An amazing informal culture of smart, hardworking, and friendly people who support and care about each other
• A mentorship program from day one
• Opportunity to work on a strategic and business-critical security initiative within a large enterprise environment
• Exposure to complex challenges around cybersecurity, technical identities, certificates and secrets management
• Formal training and certifications in security, cloud and engineering excellence
• Access to cutting-edge tools and technologies
• A dynamic company where your ideas matter more than job titles
• Flexibility with responsibility
• A Rubber Duck to help you solve those tricky technical and governance challenges

If you have any questions, drop us a line at [e-mail]