At Anaplan we are a team of innovators focused on optimizing business decision-making through our leading AI-infused scenario planning and analysis platform so our customers can outpace their competition and the market.

What unites Anaplanners across teams and geographies is our collective commitment to our customers success and to our Winning Culture.

Our customers rank among the whos who in the Fortune 50. Coca-Cola LinkedIn Adobe LVMH and Bayer are just a few of the 2400 global companies who rely on our best-in-class platform.

Our Winning Culture is the engine that drives our teams of innovators. We champion diversity of thought and ideas we behave like leaders regardless of title we are committed to achieving ambitious goals and we love celebrating our wins big and small.

Supported by operating principles of being strategy-led values-based and disciplined in execution youll be inspired connected developed and rewarded here. Everything that makes you unique is welcome; join us and lets build whats next - together!

Senior Infrastructure Engineer Certificate Management

As a Senior Infrastructure Services Engineer specialising in Certificate Management you will play a key role in designing operating and evolving our enterprise certificate management platform. This platform supports thousands of certificates across a global multi-cloud and on-premise environment.

You will focus on building a scalable automated and sustainable certificate management capability that enables service teams to manage their certificates through self-service workflows while ensuring strong governance security and visibility across the organisation.

Working closely with domain architecture security and platform teams you will help define and implement the future state of certificate lifecycle management automation and observability.

The long-term objective of this role is to minimise manual certificate operations by engineering automation self-service capabilities and platform integrations that allow service teams to securely manage certificate lifecycles at scale.

Key Responsibilities

Design implement and operate the organisations central certificate management platform supporting both public and internal certificates.

Work with architecture and security teams to define and implement enterprise standards for certificate lifecycle management including issuance renewal revocation and domain control validation (DCV).

Engineer automation that enables scalable and sustainable certificate operations across thousands of certificates in multi-cloud and on-prem environments.

Develop integrations and automation workflows to support automated certificate issuance renewal and lifecycle management.

Implement certificate discovery and inventory capabilities to ensure full visibility of certificates deployed across the environment.

Build supporting automation and integrations using scripting and infrastructure-as-code tools such as Python Terraform and Ansible.

Enable service teams to manage certificates through federated self-service capabilities while maintaining central governance and policy enforcement.

Improve observability of certificate health and lifecycle status through metrics logging dashboards and alerting.

Integrate certificate lifecycle monitoring into the organisations observability stack.

Partner with platform infrastructure and service teams to integrate certificate lifecycle processes into service delivery workflows.

Troubleshoot and resolve complex certificate lifecycle issues and drive improvements that reduce manual operational effort.

Maintain clear documentation architectural diagrams and operational runbooks for the certificate management platform.

Continuously evolve the platform to support changing industry requirements such as shorter certificate lifespans and updated domain validation processes.

Validate certificate signing requests and TLS certificate contents using tools such as openssl to ensure compliance with modern certificate standards and prevent issuance errors.

Required Qualifications

5 years of experience working in infrastructure engineering platform engineering or site reliability roles.

Strong understanding of TLS/PKI fundamentals and certificate lifecycle management.

Experience operating or integrating with enterprise certificate management platforms.

Experience developing automation and integrations using scripting or programming languages such as Python or similar.

Practical experience automating infrastructure or operational workflows using tools such as Terraform Ansible or comparable automation frameworks.

Experience working in distributed infrastructure environments spanning cloud and on-premise platforms.

Strong troubleshooting and problem-solving skills in complex production environments.

Experience collaborating with cross-functional teams including security platform engineering and service owners.

Bachelors degree in Computer Science Engineering or equivalent practical experience.

Desired Skills

Experience working with certificate lifecycle management platforms such as AppViewX Sectigo or CyberArk.

Experience integrating with public certificate authorities such as DigiCert Lets or GlobalSign.

Experience implementing automated certificate lifecycle workflows using protocols such as ACME EST (Enrollment over Secure Transport) or SCEP (Simple Certificate Enrollment Protocol).

Experience managing distributed certificate authorities certificate revocation lists (CRLs) and Online Certificate Status Protocol (OCSP) services.

Experience with private certificate authorities such as AWS Private CA HashiCorp Vault CA or Microsoft Certificate Services.

Knowledge of different types of certificates used in enterprise environments and their use cases (e.g. TLS/SSL mTLS client authentication service-to-service communication).

Experience with observability platforms such as Prometheus Grafana Splunk or ElasticSearch/OpenSearch.

Experience supporting infrastructure across multi-cloud and on-premise environments.

Experience working with containers and container orchestration platforms such as Kubernetes.

Working knowledge of Linux systems and operating environments.

Experience validating certificate signing requests and certificate metadata using tools such as openssl.

Understanding of industry trends impacting certificate lifecycle management including shorter certificate lifetimes and evolving domain control validation requirements.

Our Commitment to Diversity Equity Inclusionand Belonging (DEIB)

We believe attracting and retaining the best talent and fostering an inclusive culture strengthens our business. DEIB improves our workforce enhances trust with our partners and customers and drives business success. Build your career in a place where diversity equity inclusion and belonging arent just words on paper this is what drives our innovation its how we connect and it contributes to what makes us a market leader. We believe in a hiring and working environment where all people are respected and valued regardless of gender identity or expression sexual orientation religion ethnicity age neurodiversity disability status citizenship or any other aspect which makes people unique. We hire you for who you are and we want you to bring your authentic self to work every day!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process perform essential job functions and receive equitable benefits and all privileges of employment. Please contact us to request accommodation.

Fraud Recruitment Disclaimer

It has come to our attention that fraudulent and fictitious job opportunities are being circulated on the Internet. Prospective candidates are being contacted by certain individuals mainly through telephone calls emails and correspondence claiming they are representatives of Anaplan. The main purpose of these correspondences and announcements is to obtain privileged information from individuals.

Anaplan does not:

• Extend offers to candidates without an extensive interview process with a member of our recruitment team and a hiring manager via video or in person.
• Send job offers via email. All offers are first extended verbally by a member of our internal recruitment team whenever possible and then followed up via written communication.

All emails from Anaplan would come from an @ email address. Should you have any doubts about the authenticity of an email letter or telephone communication purportedly from for or on behalf of Anaplan please send an email to before taking any further action in relation to the correspondence.