Job Description

The Certificate Management Engineer will be responsible for managing and supporting the enterprise certificate lifecycle management platform for Baloise. The role includes administration of Venafi Trust Protection Platform (TPP), PKI infrastructure integration, certificate issuance, renewals, revocation, automation, governance, compliance, and operational support across internal and external certificate environments.

͏

Key Responsibilities:

Certificate Lifecycle Management

· Manage certificate issuance, renewal, replacement, and revocation processes.

· Monitor certificate expirations and ensure timely renewals.

· Maintain inventory and governance of internal and external certificates.

· Support TLS/SSL, client authentication, code signing, and other certificate types.

Venafi Administration

· Administer and maintain Venafi Trust Protection Platform (TPP).

· Configure policies, workflows, templates, and enrollment processes.

· Perform certificate discovery and monitoring activities.

· Manage integrations with internal and external Certificate Authorities (CAs).

PKI Operations

· Support Microsoft PKI and Certificate Authority infrastructure.

· Troubleshoot certificate enrollment and trust-chain issues.

· Manage CA integrations and certificate provisioning processes.

· Ensure secure handling of cryptographic certificates and keys.

Automation & Integration

· Develop and maintain certificate automation workflows.

· Support API-based integrations with business applications and infrastructure platforms.

· Automate certificate deployment and renewal processes.

· Collaborate with application, infrastructure, and security teams for onboarding new services.

Security & Compliance

· Ensure compliance with organizational security standards and cryptographic policies.

· Support audit requirements and certificate compliance reporting.

· Maintain role-based access controls and privileged access management principles.

· Participate in security reviews and risk assessments.

Incident & Change Management

· Handle certificate-related incidents and service requests.

· Support certificate-related changes through approved change management processes.

· Perform root cause analysis for certificate outages and authentication issues.

· Maintain operational documentation and knowledge articles.

͏

Required Skills:

Technical Skills

· Strong knowledge of PKI concepts and certificate lifecycle management.

· Hands-on experience with Venafi Trust Protection Platform (TPP).

· Experience with Microsoft Certificate Services (ADCS).

· SwissCert experience

· Knowledge of SSL/TLS, X.509 certificates, CRL, OCSP, and cryptographic standards.

· Experience with SAML authentication and certificate-based authentication.

· Scripting skills in PowerShell, Python, or similar automation tools.

· Good understanding of Active Directory and RBAC concepts.

· Familiarity with Azure/Cloud certificate management.

Preferred Skills

· Experience in insurance or financial services environments.

· Knowledge of ITIL processes.

· Experience with ServiceNow and Change Management processes.

· Understanding of load balancers, web servers, and application security.

· Experience in audit and compliance environments.

͏

What we offer:

• Flexible benefits package tailored to your needs (Multisport card, shop vouchers, etc. – via MyBenefit cafeteria)
• Premium medical services for employees and family members (Luxmed)
• Life & Disability Insurance for employees and family members (Generali) and profitable Voluntary Pension Fund
• Social Fund benefits: holiday bonuses, kindergarten allowances, etc.
• Integration and cultural events for employees
• Reward and recognition programs for high performers
• Employee Referral bonuses
• Relocation assistance: accommodation, travel, and other covered expenses
• Friendly and inclusive company culture

͏

Equal Opportunity Employer:

Wipro is an Equal Opportunity Employer. We provide consideration for all qualified applicants regardless of race, color, religion, gender, marital status, age, ethnicity, national origin, sexual orientation, political views, disability, or any other characteristic protected by law.

Internal Reporting and Whistleblower Protection:

Wipro IT Services Poland Sp. z o.o. adheres to the Internal Reporting and Whistleblower Protection Regulations. Candidates can submit internal reports via email to ombuds.person@wipro.com, through the Internet at www.wiproombuds.com, or by post/courier to Wipro's registered office.