PKI / Secrets Management Engineer Lisboa

PKI / Secrets Management Engineer
Lisboa
Lisboa, Lisboa, Portugal

? Are you the NEX T PKI / Secrets Management Engineer? ?

What we value:

• 10+ years of experience.
• Strong experience with Vault in production.
• Advanced knowledge of PKI, TLS/SSL, digital certificates.
• Experience with HSM (Hardware Security Module).
• Automation with Terraform, Helm, CI/CD.
• Solid troubleshooting skills.
• Fluent English is a must.

Nice to have:

• Knowledge of OIDC/IAM (e. g. , Keycloak).
• Experience with public clouds (AWS, Azure, GCP).
• German is a plus.
• Familiarity with agile methodologies.

What you can expect from this role:

? Lisbon – Hybrid model

• Design, deploy, and operate secure PKI and secrets management solutions in modern hybrid and
  - native environments.
• Deploy and manage Hashi
  Corp Vault in production (HA, DR, Raft storage, HSM/KMS).
• Configure namespaces, authentication backends, policies, and App
  Roles.
• Design and maintain PKI hierarchies (root, intermediate, issuing CAs).
• Automate certificate lifecycle (issuance, renewal, revocation) with Vault PKI or
  - grade solutions.
• Integrate secrets and PKI services with enterprise systems (Kubernetes, load balancers, VPNs, databases, CI/CD).
• Implement RBAC, secure audit logging, and compliance controls (FIPS, PCI-DSS, NIST).
• Automate deployments and workflows using Terraform, Helm, Ansible, Git
  Ops.
• Monitor and troubleshoot Vault and PKI operations (Prometheus, Grafana).
• Provide documentation, runbooks, and knowledge transfer.

What we offer you:

• A dynamic and professional team.
• Opportunity to participate in local or international projects.
• Personalized guidance.
• Training plan tailored to your needs.
• Career progression and development opportunities.
• Chance to be part of a
  - growing team.