Public Key Infrastructure (PKI) Operations Engineer

Description

The company is a large healthcare business that supplies insights, products and services aimed at making quality care easier to reach and more affordable.

The team is Enterprise Digital Certificate Management, which keeps the company's certificate lifecycle systems secure and reliable.

You will run day-to-day Public Key Infrastructure operations, including certificate requests, revocations and incident handling, and join on-call rotations to keep PKI services available around the clock.

Responsibilities

• Carry out certificate issuance, renewal, revocation and key recovery following established procedures.
• Track certificate expiry dates and coordinate renewals before they lapse.
• Run routine health checks and monitoring across PKI infrastructure components.
• Respond to and resolve PKI incidents within defined SLA timeframes.
• Troubleshoot certificate validation failures, trust chain problems and enrollment issues.
• Investigate and resolve alerts raised by PKI monitoring systems.
• Work with application teams to fix certificate-related service disruptions.
• Record root causes of incidents and put preventive measures in place.
• Join the rotating on-call schedule and work assigned shifts to keep support running continuously.
• Handle critical off-hours incidents with appropriate urgency.
• Make sure PKI operations follow internal policies, certificate practice statements and industry standards.
• Keep operational documentation, runbooks and standard operating procedures accurate.
• Support internal and external audits of PKI operations.
• Track and report operational metrics and KPIs.

Requirements

• 3 to 5 years of hands-on experience with PKI technologies and certificate management.
• A solid understanding of X.509 certificates, certificate authorities and trust hierarchies.
• Proficiency with PKI platforms such as Microsoft ADCS, DigiCert or GlobalSign.
• Experience with certificate enrollment protocols including SCEP, CMPv2 and ACME.
• Familiarity with managing HSMs operationally.
• Understanding of certificate revocation mechanisms, including CRL and OCSP.
• Basic scripting skills in PowerShell, Python or bash for automation.
• Experience with monitoring and logging tools such as Splunk, LogicMonitor and Grafana.
• Demonstrated experience in IT operations or security operations environments.
• A track record of working in shift-based or on-call rotations.
• Experience with ITSM tools such as ServiceNow, Remedy or Jira Service Management.
• A proven ability to juggle multiple priorities and stay effective under pressure.

Conditions

The role follows a rotating on-call schedule and shift work, with shift allowance applicable.

Base pay range is €52,500 to €87,500.

Equal opportunity: the company welcomes applicants regardless of background.

Benefits

• A Total Rewards package with benefits covering physical, mental and financial well-being.
• Competitive pay based on performance, experience and skills, equity, regular market reviews and location.
• Possible annual bonus or long-term incentive opportunities in addition to base pay.