Infrastructure Engineer – Security, Certificates & Network

About the role

We are looking for an experienced Infrastructure Engineer to protect our enterprise network, manage the full lifecycle of digital certificates, and ensure secure, high‑performance communication across hybrid cloud and on‑premises environments.

Key responsibilities

• Oversee PKI and certificate management, including generation, installation, renewal, and revocation of SSL/TLS and SSH certificates.
• Design and maintain automated renewal pipelines using ACME, Venafi, Certbot, or HashiCorp Vault.
• Deploy, configure, and manage enterprise firewalls (Palo Alto, Fortinet, Check Point) and IDS/IPS/WAF solutions.
• Administer site‑to‑site and remote‑access VPNs, software‑defined networking, and network access control policies.
• Monitor traffic and alerts via SIEM tools, investigate incidents, and coordinate vulnerability remediation for network appliances.
• Maintain disaster‑recovery configurations and conduct regular testing to ensure business continuity.

Required profile

• 5+ years of professional experience in network engineering, infrastructure security, or cyber‑security operations.
• Strong understanding of cryptographic protocols, PKI architecture, and certificate authority standards.
• Proven ability to work with firewalls, VPNs, SDN, and NAC in hybrid environments.
• Experience with compliance and audit processes related to encryption and certificate management.

Required skills

• PKI, SSL/TLS, SSH certificates, ACME protocol
• Venafi, Certbot, HashiCorp Vault
• Palo Alto, Fortinet, Check Point firewalls, IDS/IPS, WAF
• Site‑to‑site VPN, remote‑access VPN, SDN, NAC
• SIEM monitoring and incident response
• TCP/IP, BGP, OSPF, DNS
• Load balancers: F5 BIG‑IP, Citrix ADC
• Cloud security groups: AWS NSG, Azure Firewall
• OAuth2, SAML, RADIUS, TACACS+