PKI & Certificate Management Engineer (m/f/d)

Welcome to the IT Security team at Fresenius Digital Technology! We are responsible for the implementation, management and operation of programs, projects and services for a wide range of different security capabilities in various business segments within the Fresenius Group.

We are looking for a highly motivated team member who will be responsible for the design, implementation, operation, and continuous improvement of Public Key Infrastructure (PKI) and certificate lifecycle management services as a PKI & Certificate Management Engineer (m/f/d). In your new role you will focus on ensuring the security, availability, and automation of digital certificates and cryptographic services across on-premises and cloud environments.

You can look forward to a working environment that is as challenging as it is attractive. One that fits the ideal of a top workplace in so many respects - while expanding our own expert skills bank.

## Your responsibilities:

• Design, implement, and maintain enterprise PKI and certificate management solutions
• Administer certificate lifecycle management platforms (e.g., Venafi, Keyfactor, DigiCert, AppViewX, or similar solutions)
• Automate certificate issuance, renewal, revocation, and inventory processes
• Manage internal and external Certificate Authorities (CAs)
• Support secure key management and cryptographic best practices
• Integrate certificate management services with cloud, infrastructure, application, and DevOps platforms
• Monitor certificate health, expiration risks, and compliance requirements
• Troubleshoot and resolve certificate, encryption, and trust-related issues
• Develop and maintain operational procedures, standards, and documentation
• Collaborate with security, infrastructure, cloud, and application teams to implement scalable machine identity solutions
• Support audits, regulatory requirements, and security compliance initiatives

## Your qualifications:

• Bachelor's or master's degree in computer science, Information Technology, Engineering, or comparable qualification
• Strong expertise in PKI, certificate management, cybersecurity, or related infrastructure security domains
• Strong hands-on experience with certificate lifecycle management solutions and PKI technologies
• Deep Knowledge of X.509 certificates, TLS/SSL, cryptographic protocols, and key management concepts
• Experience with automation and scripting technologies
• Familiarity with cloud platforms, enterprise infrastructure, and DevOps environments
• Strong analytical, troubleshooting, and problem-solving skills
• Fluent English skills required; German skills are an advantage

## Our offer

Join #futurefresenius and make an impact in a challenging and attractive working environment that fits the ideal of a top workplace in so many respects - while expanding your own expert skills.

## Contact

[Apply now](https://apply.jcd.de/Apply.php?iJobAdID=106790&tc=3-11)

We show an excerpt and a link, and the full text when the source allows it. Brands and logos shown belong to their owners.

Source: Statistisches Bundesamt (Destatis), table; dl-de/by-2-0; StarIn's calculation

Broad estimate: €44,000–€75,000/year

Posted Oct 23, 2026