Expert PKI – External Certificates / Enrollment Automation (ACME)

Project overview

For a major public transport operator in the Île-de-France region, we are looking for a Senior PKI Expert.

They will join the entity responsible for digital identities and trusted services. The client is taking over the management of its external certificates, issued by public certification authorities. This activity comes from another team: the operation of the service is still to be defined and structured.

The objective is to have an industrialized, documented service operated according to ITIL standards.

Your missions:

Start date: end of November 2026, 2 days per week on-site and 3 days remote work.

Profile sought

Senior PKI Expert, you have a perfect command of PKI operations and the certificate lifecycle.

Essential skills:

Appreciated skills:

Autonomous, rigorous, and proactive, you know how to structure an activity that is still under construction and escalate alerts at the right time. You are quickly operational.

Work environment

You will join the entity responsible for managing digital identities and trusted services. You will be in charge of the external certificate management activity, which is currently being taken over. The context is of high operational importance, with a service to be structured according to ITIL standards and the client's security requirements. You will work in conjunction with the internal team, public certification authorities, and certificate-consuming projects.

• Manage the lifecycle of external certificates: request, issuance, renewal, revocation, deadline monitoring
• Process certificate requests in compliance with SLAs, in conjunction with public certification authorities
• Implement and automate certificate enrollment processes (ACME, SCEP, EST)
• Define the operational model, service catalog, and subscription process (validation workflow)
• Formalize user journeys and guides, as well as the RACI matrix
• Support projects consuming certificates
• Manage incidents and problems related to the service
• Implement steering indicators (monthly dashboard)
• Write operational documentation and contribute to continuous improvement
• Very good knowledge of major market certificate providers (DigiCert, GlobalSign, Sectigo…) and the standard request process: CSR, domain validation, issuance, renewal
• Experience in implementing and automating certificate enrollment: ACME, SCEP, or EST
• Experience in administering a PKI or a certificate lifecycle management (CLM) tool
• Service structuring (processes, catalog, documentation)
• Incident and request processing, knowledge of ITIL

Project details

• Start: 22/11/2026
• Duration: 12 mois renouvelable
• Remote: hybrid
• Location: Seine-Saint-Denis, France, FR
• Languages: French