PKI Certificate Engineer

Fresenius Digital Technology is responsible for the implementation, management, and operation of security programs and services for various business segments within the Fresenius Group.

• Bachelor’s or master’s degree in computer science, Information Technology, Engineering, or comparable qualification
• Strong expertise in PKI, certificate management, cybersecurity, or related infrastructure security domains
• Hands-on experience with certificate lifecycle management solutions and PKI technologies
• Deep knowledge of X.509 certificates, TLS/SSL, cryptographic protocols, and key management concepts
• Experience with automation and scripting technologies
• Familiarity with cloud platforms, enterprise infrastructure, and DevOps environments
• Strong analytical, troubleshooting, and problem-solving skills
• Fluent English skills required; German skills are an advantage

• Design, implement, and maintain enterprise PKI and certificate management solutions
• Administer certificate lifecycle management platforms (e.g., Venafi, Keyfactor, DigiCert, AppViewX, or similar solutions)
• Automate certificate issuance, renewal, revocation, and inventory processes
• Manage internal and external Certificate Authorities (CAs)
• Support secure key management and cryptographic best practices
• Integrate certificate management services with cloud, infrastructure, application, and DevOps platforms
• Monitor certificate health, expiration risks, and compliance requirements
• Troubleshoot and resolve certificate, encryption, and trust-related issues
• Develop and maintain operational procedures, standards, and documentation
• Collaborate with security, infrastructure, cloud, and application teams to implement scalable machine identity solutions
• Support audits, regulatory requirements, and security compliance initiatives