X.509/Certificate Management DevOps Engineer || Remote role

X.509/Certificate Management DevOps Engineer

Remote role

Long term contract

Additional info:
• Automate and manage the full X.509 certificate lifecycle, reducing manual tasks and preventing expirations.
• Build and maintain Kubernetes certificate automation (cert-manager, TLS tooling) and code/container signing processes.
• Enhance operational workflows with scripted notifications, escalations, and ticketing integrations.
• Collaborate cross-functionally with security, infrastructure, and platform teams to deliver scalable, production-ready automation.

Certificate Management DevOps Engineer

A top Fortune 50 financial institution is currently seeking a Certificate Management DevOps Engineer for a 100% remote opportunity. This role will focus on automating enterprise certificate lifecycle management and supporting modernization efforts across cloud and Kubernetes environments.

About the Opportunity

• Hybrid or Remote: 100% Remote

• Schedule: Monday – Friday core hours 8am-4:30pm EST

• Setting: Enterprise Financial Services / Security Engineering

• Etc.: Hands-on DevOps role focused on automation, reliability, and certificate security at scale

Responsibilities

The Certificate Management DevOps Engineer will be responsible for

• Automating X.509 certificate lifecycle processes (issuance, renewal, replacement, decommission)

• Enhancing notification, escalation, and ticketing workflows through scripting and integrations

• Building and maintaining automation for Kubernetes certificate management (cert-manager, TLS tooling)

• Supporting code and container signing automation initiatives

• Improving operational runbooks, monitoring, and alerting for production support

• Partnering with security, infrastructure, and platform teams to deliver scalable solutions

Qualifications

• 5+ years of experience in DevOps, Security Engineering, or Infrastructure Automation

• Bachelor’s degree in Computer Science, Engineering, or related field (or equivalent experience)

• Relevant certifications preferred (e.g., Kubernetes, Security, Cloud)

• Strong experience with X.509 certificate lifecycle management and PKI fundamentals

• Advanced PowerShell scripting for automation and tooling

• Experience with DevOps practices, monitoring, and production support environments

• Strong problem-solving and troubleshooting skills

• Ability to work cross-functionally with technical teams

• Strong communication and documentation skills

Desired Skills

• Experience with CyberArk / Venafi Certificate Manager (including Kubernetes)

• Experience with Kubernetes and cert-manager

• Experience with ServiceNow integrations

• Experience with Python, Ansible, Bash, or Golang

• Familiarity with machine identity management (SPIFFE/SPIRE)

--

(“Believe you can and you’re halfway there.”)

– Theodore Roosevelt

Sayantan Das | Senior Tech Recruiter

E

P: +1 |