PKI Automation Engineer

Role Overview:

We are seeking execution-oriented engineers for a PKI operations-focused role. The position requires strong PKI fundamentals, scripting abilities, and a capacity to support and improve operational processes. This hands-on role involves managing daily work through a ticketing system, executing certificate-related tasks, and contributing to the automation of manual processes.

Key Responsibilities:

Process daily work through the Jira ticketing system, including request intake, validation, and execution.

Review and interpret incoming requests to ensure accuracy and completeness.

Execute certificate-related tasks using manual processes, application UIs, and assisted scripting with PowerShell or Python.

Troubleshoot failed scripts and understand the execution flow.

Support and collaborate with engineering teams on process alignment.

Contribute to improving and documenting operational processes.

Gradually reduce manual work through increased scripting and automation.

Technical Skills:

Strong understanding of PKI concepts, including certificate structure, lifecycle, EKUs, and validation criteria.

Scripting experience with PowerShell and/or Python, including the ability to modify and execute scripts with proper inputs.

Experience with REST APIs, including authentication methods (token-based, certificate-based) and programmatic credential retrieval.

Familiarity with Jira for ticketing/workflow management and Confluence for documentation.

Active Directory experience, including knowledge of nested permissions and logical access models.

Ability to read and interpret technical documentation independently.

Preferred Qualifications:

Experience with Venafi for certificate management.

An automation mindset with the ability to identify manual processes, break them into logical steps, and convert them into scriptable workflows.

Experience in a Managed Service Provider (MSP) environment is considered beneficial