Senior Administrator AWS Security, Cloud Security

Job description

Job Description: Cloud Certification / Certificate Management Engineer Role Overview We are looking for an experienced Certification / Certificate Management Engineer to manage and secure the end-to-end lifecycle of digital certificates across cloud and hybrid infrastructure. The role will focus on PKI, SSL/TLS certificate management, automation, cloud certificate services, key management, security compliance, and certificate expiry prevention across AWS, Azure, and/or GCP environments. Key Responsibilities • Manage the complete SSL/TLS and digital certificate lifecycle, including certificate request, issuance, validation, deployment, renewal, revocation, and expiry management. • Administer Public Key Infrastructure (PKI) and Certificate Authority environments, including Root CA, Intermediate CA, certificate stores, trust chains, and CRL/OCSP-related processes. • Manage certificates across cloud platforms using services such as AWS Certificate Manager (ACM), Azure Key Vault / Managed HSM, and Google Cloud Certificate Manager / Certificate Authority Service. • Monitor certificate expiration proactively and implement automated renewal and alerting mechanisms to minimize service disruption. • Integrate certificate management with cloud-hosted applications, APIs, load balancers, web servers, Kubernetes platforms, and application gateways. • Support certificate deployment across AWS, Microsoft Azure, Google Cloud Platform, Kubernetes, OpenShift, Linux, and Windows environments. • Automate certificate issuance, renewal, and deployment using tools/scripting such as PowerShell, Python, Bash, REST APIs, Terraform, or Ansible. • Work with enterprise certificate-management platforms such as Venafi, DigiCert, Sectigo, Keyfactor, Entrust, or equivalent solutions. • Support PKI security, private keys, cryptographic controls, key rotation, secrets management, and certificate-related incident resolution. • Troubleshoot SSL/TLS issues including expired certificates, certificate-chain errors, hostname mismatch, trust issues, handshake failures, and application connectivity problems. • Maintain certificate inventories and dashboards to provide visibility into ownership, expiry, compliance, renewal status, and potential risks. • Collaborate with Cloud, DevOps, IAM, Cybersecurity, Application, Infrastructure, and Network teams for certificate deployment and security requirements. • Ensure certificate and key-management practices align with enterprise security policies and relevant standards such as NIST and ISO 27001. Required Skills • Strong hands-on experience with Certificate Management, PKI, SSL/TLS, Certificate Authorities, and cryptographic concepts. • Good working knowledge of at least one major cloud platform: AWS, Azure, or GCP. • Experience with cloud certificate/key-management services such as: o AWS Certificate Manager (ACM), AWS Private CA, AWS KMS o Azure Key Vault, Managed HSM o Google Cloud Certificate Manager, Certificate Authority Service, Cloud KMS • Experience with enterprise certificate-management/PKI products such as Venafi, DigiCert, Keyfactor, Sectigo, Entrust, or Microsoft AD CS. • Understanding of X.509 certificates, CSR, public/private keys, Root/Intermediate CA, certificate chains, CRL and OCSP. • Knowledge of certificate integration with load balancers, APIs, application gateways, web servers, Kubernetes/containers, and cloud applications. • Scripting/automation exposure using PowerShell, Python, Bash, Terraform, Ansible, or REST APIs. • Good troubleshooting skills for SSL/TLS, PKI, certificate trust, and authentication-related issues. • Understanding of IAM, cloud security, secrets management, and key-management principles. Preferred Skills • Multi-cloud exposure across AWS, Azure, and GCP. • Experience integrating certificate management into CI/CD and DevSecOps pipelines. • Experience with Kubernetes certificate management, including tools such as cert-manager. • Knowledge of Infrastructure as Code, particularly Terr Key Responsibilities Job Description: Cloud Certification / Certificate Management Engineer Role Overview We are looking for an experienced Certification / Certificate Management Engineer to manage and secure the end-to-end lifecycle of digital certificates across cloud and hybrid infrastructure. The role will focus on PKI, SSL/TLS certificate management, automation, cloud certificate services, key management, security compliance, and certificate expiry prevention across AWS, Azure, and/or GCP environments. Key Responsibilities • Manage the complete SSL/TLS and digital certificate lifecycle, including certificate request, issuance, validation, deployment, renewal, revocation, and expiry management. • Administer Public Key Infrastructure (PKI) and Certificate Authority environments, including Root CA, Intermediate CA, certificate stores, trust chains, and CRL/OCSP-related processes. • Manage certificates across cloud platforms using services such as AWS Certificate Manager (ACM), Azure Key Vault / Managed HSM, and Google Cloud Certificate Manager / Certificate Authority Service. • Monitor certificate expiration proactively and implement automated renewal and alerting mechanisms to minimize service disruption. • Integrate certificate management with cloud-hosted applications, APIs, load balancers, web servers, Kubernetes platforms, and application gateways. • Support certificate deployment across AWS, Microsoft Azure, Google Cloud Platform, Kubernetes, OpenShift, Linux, and Windows environments. • Automate certificate issuance, renewal, and deployment using tools/scripting such as PowerShell, Python, Bash, REST APIs, Terraform, or Ansible. • Work with enterprise certificate-management platforms such as Venafi, DigiCert, Sectigo, Keyfactor, Entrust, or equivalent solutions. • Support PKI security, private keys, cryptographic controls, key rotation, secrets management, and certificate-related incident resolution. • Troubleshoot SSL/TLS issues including expired certificates, certificate-chain errors, hostname mismatch, trust issues, handshake failures, and application connectivity problems. • Maintain certificate inventories and dashboards to provide visibility into ownership, expiry, compliance, renewal status, and potential risks. • Collaborate with Cloud, DevOps, IAM, Cybersecurity, Application, Infrastructure, and Network teams for certificate deployment and security requirements. • Ensure certificate and key-management practices align with enterprise security policies and relevant standards such as NIST and ISO 27001. Required Skills • Strong hands-on experience with Certificate Management, PKI, SSL/TLS, Certificate Authorities, and cryptographic concepts. • Good working knowledge of at least one major cloud platform: AWS, Azure, or GCP. • Experience with cloud certificate/key-management services such as: o AWS Certificate Manager (ACM), AWS Private CA, AWS KMS o Azure Key Vault, Managed HSM o Google Cloud Certificate Manager, Certificate Authority Service, Cloud KMS • Experience with enterprise certificate-management/PKI products such as Venafi, DigiCert, Keyfactor, Sectigo, Entrust, or Microsoft AD CS. • Understanding of X.509 certificates, CSR, public/private keys, Root/Intermediate CA, certificate chains, CRL and OCSP. • Knowledge of certificate integration with load balancers, APIs, application gateways, web servers, Kubernetes/containers, and cloud applications. • Scripting/automation exposure using PowerShell, Python, Bash, Terraform, Ansible, or REST APIs. • Good troubleshooting skills for SSL/TLS, PKI, certificate trust, and authentication-related issues. • Understanding of IAM, cloud security, secrets management, and key-management principles. Preferred Skills • Multi-cloud exposure across AWS, Azure, and GCP. • Experience integrating certificate management into CI/CD and DevSecOps pipelines. • Experience with Kubernetes certificate management, including tools such as cert-manager. • Knowledge of Infrastructure as C