- PKI Certificate Lifecycle Management Engineer
- Melbourne
- Contract 6+ Months / Permanent

Our client in Melbourne is looking for PKI Certificate Lifecycle Management Engineerthis is a contract 6+ months or Permanent role.

- Lead the enablement, configuration, and operation of PKI Certificate Lifecycle Management (CLM) solutions in a SaaS environment
- Design, build, and configure DigiCert One, including account setup, environment creation, and tenant configuration
- Implement and manage DigiCert One Trust Lifecycle Manager (TLM) for certificate issuance, renewal, and revocation
- Design, implement, and maintain enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle
- Design, implement, and manage Hardware Security Module (HSM) solutions for secure generation, storage, backup, recovery, and protection of cryptographic keys.
- Integrate DigiCert One, PKI platforms, and certificate authorities with HSM infrastructure to ensure compliance with enterprise security standards.
- Configure and administer PKI platforms to ensure secure certificate issuance, renewal, revocation, and compliance
- Support the ongoing operation and availability of certificate management services across the enterprise
- Develop and maintain PKI policies, standards, and procedures aligned to security and compliance requirements
- Work closely with application, infrastructure, and security teams to support certificate-based authentication and encryption use cases
- Perform certificate lifecycle operations, including key management, certificate rotation, and expiration management
- Monitor PKI systems for performance, availability, and security issues
- Troubleshoot and resolve certificate-related incidents, outages, and configuration issues
- Maintain technical documentation, runbooks, and operational procedures for PKI services




- Ensure compliance with internal security standards and external regulatory requirements related to cryptography and certificates
- Support audits, security reviews, and risk assessments relating to PKI and certificate usage
- Provide technical guidance and subject-matter expertise on PKI best practices and industry standards

Required Skills & Experience

- Strong expertise in Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) concepts and operations
- Hands-on experience with DigiCert One, including Trust Lifecycle Manager (TLM)
- Proven experience managing the full certificate lifecycle, including issuance, renewal, revocation, and expiration management
- Solid understanding of X.509 certificates, TLS/SSL, key pairs, and cryptographic algorithms
- Experience supporting enterprise-scale PKI environments across hybrid (on-prem and cloud) infrastructures
- Familiarity with certificate discovery, automation, and governance frameworks
- Robust troubleshooting skills for certificate-related issues impacting applications, endpoints, and infrastructure
- Experience working with Windows and Linux operating systems in secure environments
- Understanding of security controls, encryption standards, and compliance requirements related to PKI
- Strong hands-on experience with Hardware Security Modules (HSMs) and enterprise key management solutions.
- Proven experience implementing and managing HSM-backed PKI environments for Root CA, Intermediate CA, and certificate lifecycle management platforms.
- Knowledge of HSM concepts including key generation, secure key storage,



key backup/recovery, partition management, and cryptographic operations.
- Experience integrating PKI platforms such as DigiCert One, Microsoft ADCS, Entrust, or similar solutions with HSM technologies.
- Understanding of cryptographic standards, key protection requirements, and compliance frameworks governing HSM usage.
- Experience supporting operational and troubleshooting activities related to enterprise HSM infrastructure.

Education & Certifications

- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent practical experience)
- DigiCert Certified Professional (or equivalent PKI certification)
- Microsoft, AWS, or Azure security certifications with PKI focus
- CompTIA Security+ or equivalent cybersecurity certification
- CISSP, CISM, or CCSP is a plus

Preferred Skills

- Experience with certificate automation tools, APIs, and scripting (e.g., PowerShell, Python, REST APIs)
- Knowledge of cryptographic standards and regulations (e.g., NIST, ISO, CIS benchmarks)
- Experience supporting certificate-based authentication for applications, devices, and services
- Exposure to vulnerability management, encryption compliance, or zero‑trust initiatives
- Ability to work effectively with application, infrastructure, and security teams in large enterprises
- Experience with enterprise HSM platforms such as Thales Luna HSM, Entrust nShield, Utimaco, AWS CloudHSM, Azure Managed HSM, or similar technologies.
- Experience conducting CA key ceremonies, secure key migration, and PKI disaster recovery activities involving HSM‑protected keys.
- Familiarity with FIPS 140-2/140-3 validated cryptographic modules and regulatory requirements for key protection.

Only shortlisted candidates will be contacted for this role.

#J-18808-Ljbffr

📌 PKI Certificate Lifecycle Management Engineer (Melbourne)
🏢 ITbility
📍 Melbourne