Position Overview
The Platform Engineer will build and automate enterprise certificate lifecycle management processes, including certificate issuance, rotation, renewal, revocation and governance.
This role is focused on hands-on implementation and delivery rather than solution design, working within a fast-paced, security-critical environment supporting a broader enterprise security programme.
Tasks
- Implement certificate rotation automation across cloud and application environments.
- Automate certificate renewal and support certificate revocation processes.
- Integrate certificate lifecycle management into cloud services and applications.
- Modify application code where required to support certificate automation.
- Support certificate management across native AWS/GCP certificate services.
- Build scalable automation around certificate operations using Terraform and Ansible.
- Support public and private cloud certificate management across Recorded Future's platforms.
- Contribute to runbooks, documentation and reusable automation for certificate operations.
Skills & Attributes
- 5+ years of hands-on platform engineering experience, cloud and infrastructure focused.
- Strong understanding of certificate lifecycle management (CLM) and PKI concepts.
- Experience with AWS and/or GCP, including native certificate management services.
- Strong Kubernetes and Linux skills.
- Hands-on experience with Terraform and Ansible for automation.
- Strong Python skills.
- Experience with infrastructure security automation.
- Strong hands-on implementation and delivery focus.
Preferred Skills
- Experience with AppViewX (Recorded Future's selected CLM platform), Keyfactor or Venafi.
- Experience within banking, financial services or another regulated industry.
- Experience operating within a fast-paced, startup-style engineering culture.