Secrets & PKI Engineer

Secrets & PKI EngineerRemote — European Union. Company based in Dublin, Ireland.12-month ContractIdentity Security | PKI | Secrets Management | Machine Identity | Cloud Security Our client, a growing Identity Security company based in Dublin, is looking for a Secrets & PKI Engineer to build and automate the trust infrastructure used across cloud-native production environments. You'll work across PKI, secrets management, machine identity, and platform security, replacing static credentials and manual certificate processes with automated, short-lived, and auditable identity mechanisms. What You'll Work On• Build and operate secrets-management infrastructure using HashiCorp Vault• Design and maintain PKI and certificate authority services• Automate certificate issuance, renewal, rotation, and revocation• Implement mTLS for secure service-to-service communication• Build dynamic and short-lived credential workflows• Integrate secrets and certificates with Kubernetes workloads• Automate infrastructure and security configuration using Terraform• Integrate Vault and PKI services across AWS environments• Strengthen IAM controls around workloads, services, and automation• Reduce reliance on static credentials and manually managed secrets• Build monitoring and operational controls for certificate and secrets lifecycles• Partner with Platform and Security teams to embed trust infrastructure into developer workflows Core Skills• 4+ years in Platform Security, IAM, Cloud Security, DevSecOps, PKI Engineering, or similar roles• HashiCorp Vault• PKI / certificate infrastructure• Kubernetes• Terraform• AWS• mTLS• IAM• Strong understanding of cryptographic trust and cloud-native identity Nice to HaveVault PKI / Secrets EnginesAWS Private CASPIFFE / SPIREcert-managerKubernetes workload identityHSM / KMS technologiesCertificate lifecycle automationDynamic secretsService meshesOAuth 2.0 / OIDCGo or PythonZero Trust architecture