Systems Engineer IV (CLM) / PKI Automation Engineer)

Everest Technologies, Inc.; New Albany (OH); On-site; USD 120,000 - 160,000; Full time

Job summary

Everest Technologies, Inc. seeks an experienced Certificate Lifecycle Management (CLM) / PKI Automation Engineer to design and implement an enterprise certificate lifecycle program using Akeyless.

The role will manage discovery, issuance, renewal, deployment, validation, and monitoring of TLS certificates across a diverse tech stack, with a strong emphasis on last-mile deployment. The candidate should have hands-on PKI experience and be adept at integrating certificate automation with varied

Qualifications

• 7+ years of infrastructure/security engineering experience.
• 5+ years working with PKI, certificates, TLS, or certificate management platforms.
• Experience implementing enterprise CLM automation.
• Direct production experience with Akeyless highly preferred.

Responsibilities

• Design and implement an enterprise certificate lifecycle program utilizing Akeyless.
• Establish scalable processes for discovering, managing, issuing, renewing, rotating, provisioning, and validating TLS certificates across the enterprise.
• Focus on last-mile certificate deployment and integration with web servers, application servers, proxies, load balancers, and other certificate-consuming endpoints.
• Automate certificate rotation and lifecycle across heterogeneous infrastructure to reduce manual management.
• Collaborate with network, server, and cloud teams to embed certificate management into existing workflows.

Skills

Infrastructure Security

PKI/TLS

CLM Automation

Akeyless

Automation Deployment

Enterprise Environments

Job description

• New Albany, OH

Position Summary

• We are seeking an experienced Certificate Lifecycle Management (CLM) / PKI AutomationEngineer to support the design and implementation of an enterprise certificate lifecyclemanagement program utilizing Akeyless.
• The resource will help establish scalable processes for discovering, managing, issuing, renewing,rotating, provisioning, and validating TLS certificates across a diverse enterprise technologyenvironment.
• A critical focus of this engagement is last-mile certificate deployment.
• The ideal candidate will have practical experience not only with PKI and certificate managementplatforms, but with the infrastructure that actually terminates TLS and presents certificates toclients. This includes web servers, application servers, reverse proxies, load balancers, applicationdelivery controllers, network appliances, Windows and Linux systems, cloud services, containers,and other certificate-consuming endpoints.
• The successful candidate should be capable of taking a certificate lifecycle from: Discovery - Inventory - Issuance - Renewal - Deployment - Service activation/reload - Validation - Monitoring
• The objective is to reduce manual certificate management and establish repeatable, secureautomation for certificate rotation across heterogeneous infrastructure.

Preferred Skills

• 7+ years of infrastructure/security engineering experience
• 5+ years working with PKI, certificates, TLS, or certificate management platforms
• Experience implementing enterprise CLM automation
• Direct production experience with Akeyless highly preferred
• Experience migrating organizations from manual certificate renewal to automated certificatelifecycle management
• Experience supporting large heterogeneous enterprise environments
• Experience integrating certificate automation with existing infrastructure rather than requiringapplications to be redesigned
• Experience developing reusable deployment patterns across multiple application/servertechnologies