At Anaplan, we are a team of innovators focused on optimizing business decision-making through our leading AI-infused scenario planning and analysis platform so our customers can outpace their competition and the market.
What unites Anaplanners across teams and geographies is our collective commitment to our customers’ success and to our Winning Culture.
Our customers rank among the who’s who in the Fortune 50. Coca-Cola, LinkedIn, Adobe, LVMH and Bayer are just a few of the 2,400+ global companies who rely on our best-in-class platform.
Our Winning Culture is the engine that drives our teams of innovators. We champion diversity of thought and ideas, we behave like leaders regardless of title, we are committed to achieving ambitious goals, and we love celebrating our wins – big and small.
Supported by operating principles of being strategy-led, values-based and disciplined in execution, you’ll be inspired, connected, developed and rewarded here. Everything that makes you unique is welcome; join us and let’s build what’s next - together!
Senior Infrastructure Engineer – Certificate Management
As a Senior Infrastructure Services Engineer specialising in Certificate Management, you will play a key role in designing, operating, and evolving our enterprise certificate management platform. This platform supports thousands of certificates across a global multi-cloud and on-premise environment.
You will focus on building a scalable, automated, and sustainable certificate management capability that enables service teams to manage their certificates through self-service workflows while ensuring strong governance, security, and visibility across the organisation.
Working closely with domain architecture, security, and platform teams, you will help define and implement the future state of certificate lifecycle management, automation, and observability.
The long-term objective of this role is to minimise manual certificate operations by engineering automation, self-service capabilities, and platform integrations that allow service teams to securely manage certificate lifecycles at scale.
Key Responsibilities
Design, implement, and operate the organisation’s central certificate management platform supporting both public and internal certificates.
Work with architecture and security teams to define and implement enterprise standards for certificate lifecycle management, including issuance, renewal, revocation, and domain control validation (DCV).
Engineer automation that enables scalable and sustainable certificate operations across thousands of certificates in multi-cloud and on-prem environments.
Develop integrations and automation workflows to support automated certificate issuance, renewal, and lifecycle management.
Implement certificate discovery and inventory capabilities to ensure full visibility of certificates deployed across the environment.
Build supporting automation and integrations using scripting and infrastructure-as-code tools such as Python, Terraform, and Ansible.
Enable service teams to manage certificates through federated self-service capabilities while maintaining central governance and policy enforcement.
Improve observability of certificate health and lifecycle status through metrics, logging, dashboards, and alerting.
Integrate certificate lifecycle monitoring into the organisation’s observability stack.
Partner with platform, infrastructure, and service teams to integrate certificate lifecycle processes into service delivery workflows.
Troubleshoot and resolve complex certificate lifecycle issues and drive improvements that reduce manual operational effort.
Maintain clear documentation, architectural diagrams, and operational runbooks for the certificate management platform.
Continuously evolve the platform to support changing industry requirements such as shorter certificate lifespans and updated domain validation processes.
Validate certificate signing requests and TLS certificate contents using tools such as openssl to ensure compliance with modern certificate standards and prevent issuance errors.
Required Qualifications
5+ years of experience working in infrastructure engineering, platform engineering, or site reliability roles.
Strong understanding of TLS/PKI fundamentals and certificate lifecycle management.
Experience operating or integrating with enterprise certificate management platforms.
Experience developing automation and integrations using scripting or programming languages such as Python or similar.
Practical experience automating infrastructure or operational workflows using tools such as Terraform, Ansible, or comparable automation frameworks.
Experience working in distributed infrastructure environments spanning cloud and on-premise platforms.
Strong troubleshooting and problem-solving skills in complex production environments.
Experience collaborating with cross-functional teams including security, platform engineering, and service owners.
Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.
Desired Skills
Experience working with certificate lifecycle management platforms such as AppViewX, Sectigo, or CyberArk.
Experience integrating with public certificate authorities such as DigiCert, Let’s Encrypt, SSL.com, or GlobalSign.
Experience implementing automated certificate lifecycle workflows using protocols such as ACME, EST (Enrollment over Secure Transport), or SCEP (Simple Certificate Enrollment Protocol).
Experience managing distributed certificate authorities, certificate revocation lists (CRLs), and Online Certificate Status Protocol (OCSP) services.
Experience with private certificate authorities such as AWS Private CA, HashiCorp Vault CA, or Microsoft Certificate Services.
Knowledge of different types of certificates used in enterprise environments and their use cases (e.g., TLS/SSL, mTLS, client authentication, service-to-service communication).
Experience with observability platforms such as Prometheus, Grafana, Splunk, or ElasticSearch/OpenSearch.
Experience supporting infrastructure across multi-cloud and on-premise environments.
Experience working with containers and container orchestration platforms such as Kubernetes.
Working knowledge of Linux systems and operating environments.
Experience validating certificate signing requests and certificate metadata using tools such as openssl.
Understanding of industry trends impacting certificate lifecycle management, including shorter certificate lifetimes and evolving domain control validation requirements.
Our Commitment to Diversity, Equity, Inclusion and Belonging (DEIB)
We believe attracting and retaining the best talent and fostering an inclusive culture strengthens our business. DEIB improves our workforce, enhances trust with our partners and customers, and drives business success. Build your career in a place where diversity, equity, inclusion and belonging aren’t just words on paper – this is what drives our innovation, it’s how we connect, and it contributes to what makes us a market leader. We believe in a hiring and working environment where all people are respected and valued, regardless of gender identity or expression, sexual orientation, religion, ethnicity, age, neurodiversity, disability status, citizenship, or any other aspect which makes people unique. We hire you for who you are, and we want you to bring your authentic self to work every day!
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive equitable benefits and all privileges of employment. Please contact us to request accommodation.
Fraud Recruitment Disclaimer
It has come to our attention that fraudulent and fictitious job opportunities are being circulated on the Internet. Prospective candidates are being contacted by certain individuals, mainly through telephone calls, emails and correspondence, claiming they are representatives of Anaplan. The main purpose of these correspondences and announcements is to obtain privileged information from individuals.
Anaplan does not:
- Extend offers to candidates without an extensive interview process with a member of our recruitment team and a hiring manager via video or in person.
- Send job offers via email. All offers are first extended verbally by a member of our internal recruitment team whenever possible and then followed up via written communication.
All emails from Anaplan would come from an @anaplan.com email address. Should you have any doubts about the authenticity of an email, letter or telephone communication purportedly from, for, or on behalf of Anaplan, please send an email to people@anaplan.com before taking any further action in relation to the correspondence.
