PKI Automation Engineer - Certificate Lifecycle Lead

Apex Systems; New Albany (OH); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) with match

ESPP

HSA

EAP

Certification discounts

Job summary

Apex Systems is seeking a Senior Certificate Lifecycle Management/PKI Automation Engineer in New Albany, Ohio. The role focuses on designing and implementing an enterprise-grade certificate lifecycle management program with secure automation for discovery, renewal, and distribution across a heterogeneous environment.

You will lead last-mile certificate deployment, ensure seamless activation and validation on endpoints, and collaborate with infrastructure and app teams to drive automation

Qualifications

• Bachelor's degree in computer science, information security, or a related engineering field is preferred.
• Seven to ten years of systems engineering experience is required, including at least five years dedicated to public key infrastructure, certificate authority integrations, and certificate lifecycle management platforms.
• 7+ years of infrastructure/security engineering experience, 5+ years with PKI, TLS, or certificate management platforms; strong scripting and automation tooling with PowerShell, Python, or Shell; solid knowledge of web/app servers (IIS, NGINX, Apache) and Kubernetes; deep understanding of X.509 formats, chains, and trust stores.

Responsibilities

• Collaborate on architecture, configuration, testing, and implementation of PKI Certificate Lifecycle Management (CLM) and Gateway components.
• Analyze deployment patterns to identify where secure traffic terminates and establish standardized certificate delivery workflows.
• Automate delivery and installation of certificates, private keys, and intermediate chains using APIs, push commands, and configuration management tools.
• Design safe service-reload patterns to activate updated certificates while maintaining continuous application availability.
• Validate certificate replacement, verify chain integrity and handshake post-deployment.
• Establish rollback mechanisms and automated failure-handling procedures to mitigate risk during rotation cycles.
• Map certificate dependencies via network endpoint investigations and identify termination technologies.
• Drive technical discussions and collaborate with infrastructure and application teams to foster adoption of automation practices.

Skills

PKI

Certificate Lifecycle Management

Automation tooling

APIs

Infrastructure as Code

PowerShell

Python

Shell

IIS

NGINX

Apache

Kubernetes

X.509 certificates

Education

Bachelor's degree in computer science or information security

Tools

F5 BIG-IP

Job description

Apex Systems is seeking a Senior Certificate Lifecycle Management/PKI Automation Engineer in New Albany, Ohio. The role focuses on designing and implementing an enterprise-grade certificate lifecycle management program with secure automation for discovery, renewal, and distribution across a heterogeneous environment.

You will lead last-mile certificate deployment, ensure seamless activation and validation on endpoints, and collaborate with infrastructure and app teams to drive automation