Job Description
PKI Certificate Lifecycle Management Engineer
n
n
Location: Melbourne
n
Contract: Initial 6-month contract with potential extension
n
Start: ASAP
n
n
We are seeking an experienced PKI Certificate Lifecycle Management Engineer to support the design, implementation and ongoing operation of enterprise PKI and certificate lifecycle management solutions.
n
This hands-on role will support the implementation and operationalisation of DigiCert One, helping improve certificate governance, automation and compliance across a complex enterprise environment.
Key Responsibilities n
n
Lead the configuration and operation of PKI Certificate Lifecycle Management solutions
n
Design, build and configure DigiCert One environments and tenants
n
Implement and manage DigiCert One Trust Lifecycle Manager
n
Manage certificate issuance, renewal, revocation, rotation and expiration
n
Design and maintain enterprise PKI and certificate lifecycle solutions
n
Implement and manage Hardware Security Module solutions
n
Integrate DigiCert One, certificate authorities and PKI platforms with HSM infrastructure
n
Manage HSM provisioning, clustering, firmware updates, key ceremonies, backups and disaster recovery
n
Protect cryptographic keys used for certificate authorities, code signing and mutual TLS
n
Troubleshoot HSM incidents, performance issues and integration challenges
n
Develop and maintain PKI policies, standards, procedures and operational documentation
n
Monitor PKI systems for performance, availability and security issues
n
Resolve certificate-related incidents, outages and configuration problems
n
Support security audits, risk assessments and compliance reviews
n
Work closely with application, infrastructure and security teams
n
Provide technical guidance on PKI standards and best practices
n




Skills and Experience n
n
Strong expertise in Public Key Infrastructure and Certificate Lifecycle Management
n
Hands-on experience with DigiCert One and Trust Lifecycle Manager
n
Experience managing the complete certificate lifecycle
n
Strong understanding of X.509 certificates, TLS/SSL, key pairs and cryptographic algorithms
n
Experience supporting enterprise PKI across hybrid cloud and on-premises environments
n
Strong hands-on experience with Hardware Security Modules and enterprise key management
n
Experience implementing HSM-backed Root CA and Intermediate CA environments
n
Knowledge of secure key generation, storage, backup, recovery and partition management
n
Experience integrating DigiCert One, Microsoft ADCS, Entrust or similar PKI platforms with HSM technologies
n
Experience supporting Windows and Linux environments
n
Solid troubleshooting skills across applications, endpoints and infrastructure
n
Highly Regarded n
n
Experience with Thales Luna HSM, Entrust nShield, Utimaco, AWS CloudHSM or Azure Managed HSM
n
Experience conducting CA key ceremonies, secure key migrations and PKI disaster recovery
n
Knowledge of FIPS ***** or FIPS ***** cryptographic modules
n
Automation experience using PowerShell, Python or REST APIs
n
Knowledge of NIST, ISO and CIS security standards
n
Experience supporting zero-trust, encryption compliance or vulnerability management initiatives
n
DigiCert, Microsoft, AWS, Azure, Security+, CISSP, CISM or CCSP certifications
n
Why Apply? n
n
Initial 6-month Melbourne contract with potential extension
n
ASAP start
n
Work with DigiCert One and enterprise PKI technologies
n
Hands-on involvement with HSM-backed certificate environments
n
Support a strategic enterprise security initiative
n
Work across certificate governance, automation and compliance
n
#J-*****-Ljbffr

📌 Pki Certificate Lifecycle Management Engineer (Melbourne)
🏢 Whizdom
📍 Melbourne