Security, Certificates, and Network Resource

We are seeking an experienced and dedicated Infrastructure
Engineer specializing in Security, Certificates, and Networks. In this
role, you will be responsible for safeguarding our enterprise network
infrastructure, managing the lifecycle of digital certificates (PKI), and
ensuring secure, high-performance data communication across our hybrid cloud
and on-premises environments.

The ideal candidate possesses a deep understanding of
network security protocols, hands-on experience automated certificate
deployment, and a proven track record of maintaining secure network boundaries.

Key Responsibilities

Public Key Infrastructure (PKI) & Certificate
Management

• Lifecycle
  Management: Oversee the end-to-end lifecycle (generation,
  installation, renewal, and revocation) of SSL/TLS and SSH certificates
  across servers, load balancers, and applications.
  
• Automation: Implement and manage automated certificate renewal pipelines using
  protocols like ACME and tools such as Venafi, Certbot, or HashiCorp Vault.
  
• Compliance: Ensure all internal and external-facing systems comply with corporate
  encryption and certificate authority (CA) standards (e.g., DigiCert, Let's
  Encrypt, Microsoft ADCS).
  

Network Security & Administration

• Perimeter
  Security: Deploy, configure, and maintain enterprise firewalls (e.g.,
  Palo Alto, Fortinet, Check Point), Intrusion Detection/Prevention Systems
  (IDS/IPS), and Web Application Firewalls (WAF).
  
• Network
  Connectivity: Manage secure site-to-site VPNs, remote access VPNs, and
  software-defined networks (SDN) across hybrid environments.
  
• Access
  Control: Implement and enforce Network Access Control (NAC) policies,
  segmenting networks to minimize security risks and control user and device
  access.
  

Monitoring & Incident Response

• Traffic
  Analysis: Monitor network traffic, logs, and alerts via SIEM tools to
  detect and investigate potential security breaches or anomalous activity.
  
• Vulnerability
  Remediation: Identify network-level vulnerabilities, coordinate patch
  management schedules for network appliances, and upgrade firmware to
  neutralize threats.
  
• Disaster
  Recovery: Maintain and regularly test network recovery configurations
  to guarantee business continuity during outages or security incidents.
  

Required Skills & Qualifications

• Experience: 5+ years of dedicated professional experience in network engineering,
  infrastructure security, or cyber security operations.
  
• Certificate
  Expertise: Thorough understanding of cryptographic protocols, PKI
  architecture, symmetric/asymmetric encryption, and managing SSL/TLS
  certificates.
  
• Core
  Networking: Deep knowledge of TCP/IP, routing protocols (BGP, OSPF),
  DNS architecture, and load balancing technologies (e.g., F5 BIG-IP, Citrix
  ADC).
  
• Security
  Hardware: Hands-on experience configuring and troubleshooting
  next-generation enterprise firewalls and cloud network security groups
  (AWS NSGs / Azure Firewalls).
  
• Identity
  Management: Experience with secure protocols like OAuth2, SAML,
  RADIUS, and TACACS+.
  

Preferred/Nice-to-Have Skills

• Proficiency
  with Infrastructure as Code (IaC) tools like Terraform or Ansible for
  automating network and security configurations.
  
• Scripting
  capability (Python, Bash, or PowerShell) to automate certificate renewals
  and health checks.
  
• Relevant
  industry certifications such as CISSP, CCNP Security, CompTIA Security+,
  or cloud provider security specialties (AWS/Azure).