Senior Digital Certificate Specialist

🏗 We're Hiring: Senior Digital Certificate Specialist

📍 Location: United Arab Emirates (Remote)

🕒 Employment Type: Full-Time

💼 Experience Level: Mid-Level to Senior

🌐 Work Arrangement: Fully Remote

About Us

We are a construction-focused organization committed to delivering complex projects through disciplined contract management, operational excellence, risk management, and collaborative project delivery. Our distributed teams collaborate across Project Management, Construction, Engineering, Procurement, Commercial, Legal, Finance, Human Resources, Design, Quality, HSE, Consultants, Contractors, Suppliers, Logistics, Administration, Information Technology, and Executive Leadership to maintain secure, reliable, and resilient business operations.

As our organization continues to expand its digital capabilities, we recognize the importance of trusted digital identities, secure electronic communications, reliable authentication, and strong cryptographic controls. Digital certificates are essential to protecting enterprise applications, cloud platforms, network infrastructure, connected devices, internal systems, and sensitive project information.

We are committed to strengthening cybersecurity through effective certificate governance, secure Public Key Infrastructure (PKI), automated certificate management, and continuous monitoring to support business continuity, regulatory compliance, and operational excellence.

The Role

We are seeking an experienced Senior Digital Certificate Specialist to manage, maintain, and enhance digital certificate services across our enterprise technology environment. This role will oversee certificate issuance, enrollment, installation, renewal, validation, revocation, and retirement while ensuring that digital certificates remain secure, trusted, properly configured, and aligned with organizational security standards.

The successful candidate will support enterprise PKI, certificate authorities, TLS/SSL certificates, code-signing certificates, email security certificates, device certificates, and other certificate-based authentication and encryption technologies. The role will also focus on certificate discovery, inventory management, expiration monitoring, automation, troubleshooting, and risk reduction.

Working closely with Cybersecurity, Information Security, Infrastructure, Network, Cloud, Application, DevOps, Identity and Access Management, and Service Management teams, the Senior Digital Certificate Specialist will help ensure that certificate-dependent services remain secure, available, and compliant with applicable requirements.

The ideal candidate will combine strong technical expertise in digital certificates, cryptographic technologies, certificate management platforms, and PKI operations with excellent problem-solving, documentation, stakeholder coordination, and security governance skills.

Key Responsibilities1. Enterprise Digital Certificate Management

• Manage the complete lifecycle of digital certificates across enterprise systems, applications, infrastructure, networks, endpoints, and cloud environments.
• Coordinate certificate requests, identity verification, enrollment, issuance, deployment, renewal, validation, revocation, and retirement.
• Establish standardized procedures for certificate provisioning, installation, replacement, and decommissioning.
• Ensure certificates are issued only for authorized identities, verified domains, approved applications, and legitimate business purposes.
• Maintain appropriate certificate ownership, accountability, approval, and lifecycle tracking mechanisms.
• Verify that certificates contain accurate subject names, Subject Alternative Names (SANs), issuer information, key usage attributes, and validity periods.
• Ensure certificates are deployed to the correct systems and associated with the appropriate cryptographic keys and services.
• Review certificate configurations to identify incorrect attributes, weak cryptographic parameters, expired certificates, and inappropriate trust relationships.
• Coordinate certificate lifecycle activities with application owners, infrastructure administrators, service providers, and technology stakeholders.
• Establish consistent certificate management practices across production, development, testing, staging, and disaster recovery environments.
• Maintain detailed records of certificate issuance, renewal, deployment, revocation, and retirement activities.
• Identify opportunities to improve certificate lifecycle reliability, standardization, automation, and operational efficiency.

2. Public Key Infrastructure Administration

• Support the administration, maintenance, and continuous improvement of enterprise Public Key Infrastructure environments.
• Coordinate with internal and external Certificate Authorities (CAs) to manage certificate issuance, renewal, validation, and revocation.
• Maintain documentation of certificate authority hierarchies, trusted root certificates, intermediate certificates, trust relationships, and issuance policies.
• Support the configuration and maintenance of certificate authority services and associated management systems.
• Review certificate issuance policies, enrollment permissions, certificate templates, and authorization controls.
• Ensure certificate issuance follows approved identity verification, domain validation, and organizational authorization requirements.
• Support the administration of enterprise certificate templates and enrollment policies for users, devices, servers, and applications.
• Assist with certificate authority upgrades, migrations, configuration changes, and service maintenance.
• Coordinate with cryptographic and key management teams to protect certificate authority signing keys and other sensitive cryptographic assets.
• Review PKI configurations for excessive privileges, insecure settings, weak trust relationships, and unauthorized issuance capabilities.
• Support the implementation of resilient PKI architectures and appropriate backup and recovery arrangements.
• Maintain technical documentation covering PKI architecture, operational dependencies, certificate policies, and recovery procedures.
• Ensure certificate authority operations are appropriately monitored, logged, and reviewed.

3. Certificate Discovery and Inventory Management

• Discover digital certificates across servers, endpoints, network appliances, load balancers, databases, applications, cloud services, containers, and other technology assets.
• Maintain a centralized inventory of certificates, including certificate identifiers, subjects, issuers, serial numbers, fingerprints, validity periods, algorithms, and deployment locations.
• Record certificate owners, business purposes, associated services, environment classifications, renewal methods, and technical dependencies.
• Identify unmanaged, undocumented, orphaned, duplicate, unauthorized, and unnecessary certificates.
• Reconcile certificate inventories against configuration management databases, infrastructure inventories, cloud asset records, and application registers.
• Establish recurring certificate discovery and inventory validation processes.
• Investigate discrepancies between monitoring platforms and certificates actually deployed across the environment.
• Identify certificates issued by unapproved or untrusted certificate authorities and coordinate appropriate investigation.
• Track certificates approaching expiration and prioritize remediation based on business criticality and operational risk.
• Maintain visibility into certificates used by construction project management platforms, engineering applications, procurement systems, financial applications, document management services, and collaboration environments.
• Develop inventory reports covering certificate ownership, lifecycle status, renewal schedules, configuration risks, and outstanding remediation activities.
• Periodically assess discovery coverage and address gaps affecting certificate visibility.

4. Certificate Enrollment, Issuance, and Validation

• Manage certificate enrollment and issuance processes for users, devices, servers, applications, and enterprise services.
• Validate certificate requests against approved identities, domain ownership, system requirements, and authorization records.
• Support automated and manual enrollment mechanisms in accordance with organizational policies.
• Work with relevant teams to configure and troubleshoot certificate enrollment protocols such as ACME and SCEP where applicable.
• Validate certificate chains, issuer trust, validity periods, key usage, Extended Key Usage, and Subject Alternative Name attributes.
• Ensure certificates use approved cryptographic algorithms, key lengths, and security parameters.
• Investigate certificate enrollment failures, issuance delays, validation errors, and policy conflicts.
• Coordinate with DNS administrators, domain owners, application teams, and certificate providers to resolve validation issues.
• Confirm that certificate requests are appropriately approved and traceable to authorized service requests or change records.
• Verify that certificate chains terminate at approved trust anchors and that required intermediate certificates are available.
• Investigate incorrect certificate attributes, incomplete chains, unsupported algorithms, and trust configuration failures.
• Ensure that certificate issuance procedures include appropriate checks against unauthorized requests and domain impersonation.
• Maintain records of enrollment requests, approvals, issuance decisions, and validation results.