Job Description
Day to day: The Senior PKI Platform Administrator is the enterprise owner and technical architect of the company's internal and external digital trust infrastructure. Utilizing our centralized, cloud-based Certificate Lifecycle Management (CLM) and Public Key Infrastructure as a Service (PKIaaS) ecosystem, this role is responsible for engineering the "last mile" integrations, automation pathways, and governance models that allow teams to safely self-service their cryptographic needs. This role focuses on platform health, vendor service management, automation enablement (via APIs and localized Orchestration Agents), and translating organizational security policies into effective guardrails. This position ensures the elimination of certificate-related downtime while maintaining a rigorous security posture across multi-cloud and on-premises environments. What You Will Do Centralized CLM & PKIaaS Platform Ownership: Act as the primary administrator, subject matter expert, and product owner for the enterprise Certificate Lifecycle Management (CLM) portal and integrated Public Certificate Authority (CA) infrastructure. Manage user access control, tenant health, role-based permissions (RBAC), and certificate templates within the centralized management platform. Oversee Public Domain Control Validation (DCV) processes with external CAs to ensure seamless, automated issuance of public-facing certificates. Monitor platform consumption metrics, API health, and certificate credit pools to optimize licensing and enterprise spend. Provide strategic leadership in the development and execution of certificate lifecycle management. Collaborate with senior stakeholders to align PKI initiatives with organizational goals and objectives. Stay updated with emerging PKI related trends, threats, and technologies to provide expert guidance and recommendations. Integration Engineering & DevOps Enablement : Deploy, configure, and maintain localized platform orchestration tools and agents across enterprise networks to facilitate automated certificate lifecycle actions. Partner with Application, DevOps, and Infrastructure teams to provide secure API endpoints, SDKs, and documentation for integrating certificate issuance into CI/CD pipelines (e.g., automated build tools, configuration management scripts). Standardize and publish automated enrollment mechanisms (such as ACME protocols, enrollment gateways, or MDM integrations) for cloud workloads, containers, and enterprise endpoints. Act as a consultative architectural resource for internal teams designing custom or legacy system integrations with the central PKI platform.