Senior Certificate Lifecycle Management (CLM) / PKI Automation Engineer - Hybrid

• Experienced Senior Certificate Lifecycle Management (CLM) / PKI Automation Engineer to support the implementation of an enterprise certificate lifecycle management program using Akeyless.
• Strong hands-on experience with Public Key Infrastructure (PKI), TLS/SSL certificate management, infrastructure automation, and certificate deployment across enterprise environments.
• A key focus  is end-to-end certificate automation, particularly last-mile deployment—ensuring renewed certificates are securely installed, activated, and validated on the actual servers, applications, load balancers, and other infrastructure endpoints that terminate TLS connections.

Key Responsibilities

• Assist with the design, configuration, implementation, and testing of Akeyless Certificate Lifecycle Management (CLM).
• Develop automated workflows for certificate discovery, issuance, renewal, rotation, provisioning, and revocation.
• Configure and troubleshoot Akeyless Gateway components, certificate issuers, targets, and provisioning workflows.
• Integrate Akeyless with existing public and private Certificate Authorities (CAs).
• Identify TLS termination points across enterprise infrastructure, including web servers, application servers, load balancers, reverse proxies, and network appliances.
• Automate certificate and private-key deployment, configuration updates, service reloads, and certificate activation.
• Implement certificate validation, monitoring, failure handling, and rollback mechanisms to minimize application downtime.
• Troubleshoot certificate chains, trust issues, CN/SAN mismatches, TLS configurations, permissions, and deployment failures.
• Develop reusable automation scripts and deployment patterns using PowerShell, Python, Bash, REST APIs, and related technologies.
• Support certificate discovery and endpoint identification usi