Microsoft Infrastructure Engineer (PKI)

A leading global healthcare technology organisation is seeking a Microsoft Infrastructure Engineer specialising in Public Key Infrastructure (PKI) to join their expert team in the Philippines. This is an exceptional opportunity for you to play a pivotal role in supporting secure, reliable, and scalable infrastructure that underpins critical health services worldwide.

What you'll do:

• Administer and support enterprise-wide Public Key Infrastructure (PKI), including Root and Issuing Certificate Authorities (CAs), ensuring seamless operation across all environments.
• Oversee the full lifecycle of certificates—issuance, renewal, revocation, and retirement—for internal servers, external/public TLS endpoints, load balancers, proxies, gateways, applications, and services.
• Maintain certificate templates, enrollment policies, validity standards, and ensure compliance with organisational requirements for key sizes, algorithms, naming conventions, and Subject Alternative Name (SAN) rules.
• Operate and monitor Certificate Revocation List (CRL), Online Certificate Status Protocol (OCSP), and certificate distribution endpoints to guarantee uninterrupted service availability.
• Conduct routine PKI health checks, audits, lifecycle reviews, and proactively monitor certificate expiration to prevent outages or disruptions.
• Respond promptly to certificate-related incidents such as expired or misconfigured certificates; maintain accurate inventory records including ownership metadata and renewal methods.
• Leverage automation tools and scripting languages like PowerShell or Python to streamline certificate renewals, deployments to servers or platforms, reporting tasks, and discovery processes.
• Collaborate closely with automation and platform teams to integrate certificate management into infrastructure workflows—including load balancer or ingress updates—and maintain detailed runbooks for both automated and manual processes.
• Install, update, and manage certificates on Windows/Linux servers, web servers (IIS/Apache/Nginx), reverse proxies/load balancers (F5/HAProxy/Citrix), virtual machines, container platforms (Kubernetes/OpenShift), and cloud workloads.
• Coordinate with network/security teams to implement TLS standards; support audits/compliance activities (SOX/PCI/ISO/internal reviews); maintain comprehensive documentation for PKI architecture and operational procedures.

What you bring:

• Undergraduate degree or equivalent experience providing foundational knowledge required for complex infrastructure roles within large-scale organisations.
• At least five years’ proven experience in compute/infrastructure/systems administration roles supporting enterprise environments at scale.
• Minimum three years’ hands-on experience managing PKI/certificate services—including production environments—with demonstrated ability to handle certificate issuance/renewal processes efficiently.
• Solid operational background deploying certificates on Windows/Linux servers as well as web servers (IIS/Apache/Nginx) and load balancers/reverse proxies (F5/HAProxy/Citrix).
• Administrator-level expertise with Microsoft Active Directory Certificate Services (AD CS) or similar enterprise PKI tools/platforms; familiarity with Venafi/Keyfactor/AppViewX/DigiCert/Sectigo considered advantageous.
• Comprehensive understanding of X.509 certificates/TLS/HTTPS protocols/certificate chains/trust models; ability to evaluate impact of changes/additions across interconnected systems.
• Proficiency in scripting languages such as PowerShell/basic Python/shell scripting for administrative automation/reporting/certificate discovery tasks; experience using ITSM tools like ServiceNow preferred.
• Experience supporting regulated/audited environments—demonstrating awareness of SOX/PCI/ISO/internal security review requirements—and maintaining thorough documentation for compliance purposes.
• Preferred: Experience with cloud certificate services (AWS ACM/Azure Key Vault Certificates), Kubernetes certificate administration (cert-manager from an ops perspective), HSM-backed key storage/code-signing/device/service identity certificates/security/infrastructure certifications.

What sets this company apart:

This organisation stands out as a global leader committed not only to technological excellence but also to fostering an inclusive environment where every team member feels valued. Flexible working opportunities are embedded into their culture—empowering you to balance personal commitments while pursuing professional ambitions within a supportive network of knowledgeable colleagues who share your passion for making a difference. The company’s dedication extends beyond business objectives: they actively champion environmental sustainability initiatives while promoting equity throughout their operations—a testament to their genuine care for both employees’ well-being and broader societal impact.

What's next:

If you are ready to take your expertise in Microsoft Infrastructure Engineering Public Key Infrastructure to new heights within an organisation that truly values your contribution—this is your moment!

Apply today by clicking on the link provided; seize this opportunity to join an inspiring team dedicated to shaping the future of secure healthcare technology.

Due to the high volume of applications we are experiencing, our team will only be in touch with you if your application is shortlisted.