Systems Engineer IV ((CLM) / PKI Automation Engineer)

Position Summary

We are seeking an experienced Certificate Lifecycle Management (CLM) / PKI Automation Engineer to support the design and implementation of an enterprise certificate lifecycle management program utilizing Akeyless.
The resource will help establish scalable processes for discovering, managing, issuing, renewing, rotating, provisioning, and validating TLS certificates across a diverse enterprise technology environment.
A critical focus of this engagement is last-mile certificate deployment.
The ideal candidate will have practical experience not only with PKI and certificate management platforms, but with the infrastructure that actually terminates TLS and presents certificates to clients. This includes web servers, application servers, reverse proxies, load balancers, application delivery controllers, network appliances, Windows and Linux systems, cloud services, containers, and other certificate-consuming endpoints.
The successful candidate should be capable of taking a certificate lifecycle from: Discovery → Inventory → Issuance → Renewal → Deployment → Service activation/reload → Validation → Monitoring
The objective is to reduce manual certificate management and establish repeatable, secure automation for certificate rotation across heterogeneous infrastructure.

Preferred Skills:

7+ years of infrastructure/security engineering experience
5+ years working with PKI, certificates, TLS, or certificate management platforms
Experience implementing enterprise CLM automation
Direct production experience with Akeyless highly preferred
Experience migrating organizations from manual certificate renewal to automated certificate lifecycle management
Experience supporting large heterogeneous enterprise environments
Experience integrating certificate automation with existing infrastructure rather than requiring applications to be redesigned
Experience developing reusable deployment patterns across multiple application/server technologies