Senior Certificate Lifecycle Automation Specialist

Job Title: Senior Certificate Lifecycle Automation Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking an experienced Senior Certificate Lifecycle Automation Specialist to design, implement, and manage automated digital certificate lifecycle processes across enterprise infrastructure, cloud platforms, applications, and security systems. The successful candidate will ensure certificates are issued, renewed, deployed, monitored, and revoked securely and efficiently, reducing expiration risks and maintaining reliable encrypted communications.

This role requires strong expertise in Public Key Infrastructure (PKI), certificate authorities, automation, cryptographic standards, and enterprise security operations. You will collaborate with infrastructure, DevOps, cybersecurity, and application teams to improve certificate governance, eliminate manual processes, and maintain compliance with organizational security requirements.

Key Responsibilities

• Design and implement automated workflows for certificate discovery, enrollment, issuance, renewal, deployment, revocation, and replacement.
• Manage enterprise certificate lifecycle processes across public and private certificate authorities, internal PKI systems, and cloud environments.
• Configure and maintain certificate automation using protocols and technologies such as ACME, EST, SCEP, and supported enterprise enrollment mechanisms.
• Monitor certificate inventories, expiration dates, validity periods, cryptographic algorithms, key lengths, and certificate chain integrity.
• Develop automated alerts and remediation workflows to prevent certificate expiration, service outages, and configuration inconsistencies.
• Integrate certificate lifecycle automation with servers, load balancers, web applications, databases, Kubernetes clusters, API gateways, and network devices.
• Automate certificate provisioning and renewal across Linux, Windows, containerized, and cloud-native environments.
• Implement secure private key generation, storage, access control, rotation, and protection in accordance with approved cryptographic policies.
• Integrate certificate management platforms with HSMs, secrets management systems, identity providers, and configuration management tools where appropriate.
• Troubleshoot certificate chain failures, trust-store inconsistencies, TLS handshake errors, hostname mismatches, and automated enrollment issues.
• Establish certificate governance standards, ownership records, approval workflows, renewal policies, and exception management procedures.
• Evaluate certificate configurations for weak algorithms, inadequate key sizes, inappropriate validity periods, and other security weaknesses.
• Collaborate with DevOps and platform engineering teams to incorporate certificate automation into CI/CD pipelines and infrastructure-as-code workflows.
• Maintain audit trails, certificate inventories, automation logs, technical documentation, and compliance evidence.
• Coordinate certificate authority migrations, cryptographic policy changes, and certificate infrastructure upgrades with minimal service disruption.
• Develop scripts and integrations using APIs and automation tools to improve certificate discovery, reporting, and lifecycle management.
• Support security audits, incident investigations, and remediation activities involving certificate misuse, expiration, or compromise.
• Recommend improvements to certificate management architecture, automation coverage, scalability, and operational resilience.

Qualifications and Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related technical discipline.
• Significant experience in PKI engineering, certificate management, security automation, or enterprise infrastructure operations.
• Strong understanding of X.509 certificates, certificate chains, certificate authorities, certificate signing requests, and trust stores.
• Hands-on experience with certificate lifecycle management platforms, enterprise PKI solutions, or public and private certificate authorities.
• Familiarity with ACME, EST, SCEP, TLS, mutual TLS, and certificate enrollment and renewal mechanisms.
• Experience automating certificate operations using Python, PowerShell, Bash, REST APIs, or comparable tools.
• Knowledge of cryptographic algorithms, key management, certificate revocation lists, and Online Certificate Status Protocol (OCSP).
• Experience integrating certificate services with web servers, application platforms, load balancers, cloud services, and container environments.
• Familiarity with Kubernetes certificate management, secrets management, and infrastructure-as-code practices is an advantage.
• Understanding of secure key storage, HSM integration, certificate access controls, and cryptographic policy enforcement.
• Experience with monitoring, alerting, configuration management, and automated compliance reporting.
• Strong analytical, troubleshooting, communication, and technical documentation skills.
• Ability to manage multiple certificate environments and coordinate effectively with distributed teams.
• Relevant certifications in cybersecurity, cloud security, PKI, or enterprise certificate management are advantageous.

Key Performance Indicators (KPIs)

• Renewal Success Rate: Percentage of certificates renewed and deployed successfully before expiration.
• Certificate Availability: Reduction in service interruptions caused by expired or incorrectly configured certificates.
• Automation Coverage: Percentage of eligible certificates managed through automated lifecycle workflows.
• Inventory Accuracy: Completeness and accuracy of certificate discovery, ownership, and status records.
• Security Compliance: Timely remediation of weak, misconfigured, or non-compliant certificates.
• Incident Resolution: Time required to resolve certificate-related service disruptions.
• Operational Efficiency: Reduction in manual certificate management effort and repetitive administrative tasks.

What We Offer

• Competitive compensation based on qualifications and relevant experience.
• Fully remote work-from-home arrangements.
• Opportunities to work with enterprise PKI, cryptographic infrastructure, and advanced security automation solutions.
• Professional development in certificate management, cloud security, DevSecOps, and infrastructure automation.

How to Apply

Interested candidates should submit an updated CV highlighting their experience in PKI, certificate lifecycle automation, certificate authority integration, cryptographic security, and enterprise infrastructure.

Please include examples of automation projects delivered, certificate-related incidents resolved, and improvements made to security, compliance, or operational efficiency.

Email Subject: Application – Senior Certificate Lifecycle Automation Specialist (United Arab Emirates Remote)

• Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer.