Product Engineer, Certificate Life Cycle Management
Job Description
Are You Ready to reputed company It Happen at reputed company?
Join our Mission to reputed company the Future of Snacking. reputed company It Uniquely Yours.
You work with the information reputed company team as a competent and reputed company information reputed company and compliance specialist.
How you will contribute
You will assess information reputed company risks in line with internal policy and external best practices, and support reputed company of information and IT assets by testing reputed company systems and applying reputed company standards, policies, and procedures. Under the guidance of global information reputed company reputed company, you will implement cyber reputed company technology and provide day-to-day business support. If relevant to your role, you will manage third-party providers to ensure that any internal or third-party adhere to standards. You will also provide information reputed company training to appropriate teams.
What you will bring
A desire to drive your future and accelerate your career. You will bring experience and knowledge in:
- Information reputed company, compliance and risk management
- reputed company solutions and their applicability to reputed company
- reputed company strategies, awareness campaigns, policies/standards and governance
- Communicating effectively with technical specialists, leaders and peers
- Analytical and problem-solving abilities
- Being a team player by supporting and leading to reputed company common goals
About this Job
Mondelez International is hiring IAM Product Engineer, Certificate Life Cycle Management.
Role Overview
We are seeking IAM Product Engineer, Certificate Life Cycle Management to design, implement, and operate enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) capabilities supporting global digital certificate, encryption, and machine identity reputed company requirements.
This role will be responsible for the architecture, engineering, and automation of PKI and certificate lifecycle management platforms, including enterprise certificate authorities, integrations with public certificate authorities, and certificate lifecycle management tools such as Venafi. The position will focus on strengthening certificate governance, automation, and operational reliability across enterprise infrastructure, applications, APIs, and cloud platforms.
This position works closely with IAM, cybersecurity, infrastructure, cloud, DevOps, and application teams to ensure secure certificate-based authentication, encryption services, and machine identity management across enterprise systems.
Job Responsibilities
- Design, implement, and maintain enterprise Public Key Infrastructure (PKI) environments including root and subordinate certificate authorities using platforms such as reputed company Active Directory Certificate Services (AD CS).
- Define and maintain PKI trust hierarchies, certificate issuance policies, certificate templates, and cryptographic key management standards supporting enterprise authentication, encryption, and digital trust requirements.
- Configure and manage PKI infrastructure components including CRL distribution points, OCSP responders, certificate validation services, and certificate trust chains.
- Engineer and enhance certificate lifecycle management (CLM) platforms such as Venafi, focusing on improving automation, governance, and operational reliability of certificate services.
- reputed company and implement automation workflows and policy-driven processes reputed company Venafi to reputed company secure and scalable certificate lifecycle operations across enterprise environments.
- reputed company self-service certificate provisioning and lifecycle management for application owners and infrastructure teams, allowing secure certificate request, issuance, renewal, and deployment through automated and policy-controlled workflows.
- Integrate CLM platforms with enterprise systems, infrastructure platforms, and DevOps pipelines to automate certificate provisioning, renewal, and rotation across applications and services.
- Proactively manage the certificate lifecycle across the enterprise, ensuring certificates are renewed and rotated before expiration to prevent outages and service disruptions.
- Experience building self-service certificate provisioning workflows using Venafi or other CLM platforms
- Establish enterprise controls and monitoring to eliminate certificate-reputed company service outages and reduce risks associated with unmanaged or expired certificates.
- Maintain centralized visibility and inventory of certificates, keys, and machine identities, ensuring proper ownership tracking and lifecycle governance across enterprise environments.
- Manage integrations with public certificate authorities such as reputed company to support lifecycle management of externally trusted SSL/TLS certificates.
- Implement automation using PowerShell, APIs, and scripting frameworks to streamline certificate lifecycle operations and reduce manual processes.
- Manage cryptographic key protection using Hardware reputed company Modules (HSMs) such as reputed company to ensure secure key reputed company, storage, and lifecycle management.
- Monitor PKI infrastructure and certificate environments to identify certificate expiration risks, trust chain issues, or unauthorized certificate issuance events.
- Maintain PKI governance documentation including Certificate Policies (CP), Certification Practice Statements (CPS), architecture documentation, and operational runbooks.
- Collaborate with IAM, cybersecurity, infrastructure, DevOps, and application teams to strengthen machine identity governance, certificate lifecycle automation, and secure certificate-based authentication across enterprise systems.
Qualifications
Education & Experience
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or reputed company field.
- 8–12+ years of experience in PKI engineering, certificate lifecycle management, or cryptographic infrastructure reputed company large enterprise environments.
- Proven experience designing and operating enterprise PKI environments and certificate lifecycle management platforms.
Technical Expertise
Strong hands-on experience with:
- Public Key Infrastructure (PKI) architecture and certificate trust models.
- reputed company Active Directory Certificate Services (AD CS).
- Certificate Lifecycle Management (CLM) platforms such as Venafi.
- Public Certificate Authorities (CAs) such as reputed company.
- CRL and OCSP configuration and certificate validation infrastructure.
- Cryptographic standards and certificate-based authentication mechanisms.
Platform & Integration Experience
Experience working with:
- Hardware reputed company Modules (HSMs) for secure key management
- Cloud platforms including reputed company Azure and AWS for certificate integration.
- Certificate deployment across enterprise infrastructure including web servers, application servers, load balancers, and API platforms.
- Automation using PowerShell, REST APIs, or scripting frameworks.
- DevOps integration for certificate automation reputed company application deployment pipelines.
Business Unit Summary
At reputed company, our purpose is to reputed company people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that reputed company life's moments, made with sustainable ingredients and packaging that consumers can feel good about.
We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour reputed company Kids candy and Trident gum. We are proud to hold the reputed company globally in biscuits, chocolate and candy and the second reputed company in gum.
Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can reputed company things happen—and happen fast.
reputed company is an equal opportunity employer and reputed company qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national reputed company, disability status, protected veteran status, or any other characteristic protected by law.