Certificate Lifecycle Engineer

✅ What “Updating PKI certificates” means

They want someone who can :

• Renew certificates before they expire.
• Replace expiring or compromised certificates on network devices.
• Generate CSRs (Certificate Signing Requests) and work with internal or external Certificate Authorities (CAs).
• Install certificates on network equipment (routers, switches, firewalls, load balancers, VPN appliances, proxies, wireless controllers, etc.).
• Validate certificate chains (root → intermediate → leaf).
• Update trust stores on network devices.
• Troubleshoot certificate-related outages like :
• VPN authentication failures
• TLS handshake issues
• Certificate mismatch or wrong key pairs
• Expired or revoked certificates

✅ Examples of network devices needing PKI updates

A network engineer may need to update certs on :

✅ Why customers care

Expired or misconfigured certificates can cause :

✅ Required skill set

When a customer asks for this, they usually expect :