Senior PKI & TLS Automation Engineer (Remote)

Ensono; United States; Remote; USD 49,000 - 78,000; Full time

Benefits offered by this job

Health and dental insurance

Private pension with company match

Meal and internet allowance

Employee assistance program

Wellness program

Job summary

Ensono is seeking a senior PKI engineer to own certificate lifecycle in a managed services environment, automating SSL/TLS operations at scale and integrating with delivery pipelines. The role is remote in Brazil with a 40-hour workweek and strong security focus.

You will manage CA infrastructure, automate issuance/renewals, and work with Kubernetes, Docker, and IaC tools. This position requires 6+ years in PKI and certificate management.

Qualifications

• 6+ years in certificate management, PKI administration, or related security infra.
• Solid knowledge of SSL/TLS protocols and certificate formats (X.509, PEM, DER, PKCS#12).
• Experience with commercial and open-source CAs and tooling (OpenSSL, Keyfactor, certbot).
• Familiar with CI/CD, IaC (Terraform, Ansible) and container platforms (Kubernetes, Docker).
• Proficient in Linux/Unix and Windows server administration; secure key handling and audits.

Responsibilities

• Generate, request, and provision SSL/TLS certificates across CAs with secure key handling.
• Monitor expiration and perform renewals to prevent outages.
• Automate certificate generation, installation, and renewal using scripting/orchestration.
• Integrate cert management with CI/CD pipelines, IaC, and Kubernetes/Docker.
• Maintain security policy compliance, audit documentation, and incident response readiness.
• Troubleshoot certificate incidents across dev/ops/security, including ADCS enrollment issues.
• Maintain CA infrastructure, backups, renewal, CRL/AIA rollover and key ceremonies.
• Produce documentation, runbooks, and training material for broader teams.

Skills

PKI administration

SSL/TLS protocols

Cert management

OpenSSL

Keyfactor Command

Terraform

Ansible

Kubernetes

Windows Server

Linux/Unix

CI/CD integration

Tools

Keyfactor Command

OpenSSL

certbot

Terraform

Ansible

Nginx

Apache

Job description

Ensono is seeking a senior PKI engineer to own certificate lifecycle in a managed services environment, automating SSL/TLS operations at scale and integrating with delivery pipelines. The role is remote in Brazil with a 40-hour workweek and strong security focus.

You will manage CA infrastructure, automate issuance/renewals, and work with Kubernetes, Docker, and IaC tools. This position requires 6+ years in PKI and certificate management.