Senior PKI Engineer / Architect

Project overview

We are looking for experienced PKI specialists for future positions in cybersecurity companies, specialized consultancies, and enterprise security teams. This advertisement is for upcoming opportunities and not for a currently open position.

We are seeking professionals who can take responsibility for certificate infrastructures, automate manual processes, and support the transition to more adaptive cryptographic systems.

Responsibilities

Required Experience:

Valuable additional qualifications include HSM integration, Cloud PKI, code signing, and Post-Quantum Cryptography migration experience. Direct PQC experience is not mandatory if fundamental PKI expertise is present.

• Design, implementation, and improvement of enterprise PKI and certificate management infrastructures
• Automation of certificate issuance, renewal, revocation, and monitoring
• Integration of certificate services with applications, cloud platforms, devices, and identity systems
• Investigation and resolution of certificate errors affecting authentication and service availability
• Assessment of existing cryptographic dependencies and support for Post-Quantum Cryptography preparation
• Translation of security requirements into practical designs, documentation, and delivery plans
• Hands-on implementation of PKI systems with responsibility beyond routine administration
• Solid understanding of X.509, Certificate Authorities, Trust Chains, TLS, and Mutual TLS
• Experience with platforms such as Microsoft AD CS, EJBCA, Keyfactor, AppViewX, or equivalent solutions
• Scripting and automation with PowerShell, Python, or similar languages
• Integration of PKI with enterprise infrastructure and applications
• Ability to explain technical decisions to engineering teams and business stakeholders

Project details

• Start: flexible
• Location: DE
• Languages: German