Senior Infrastructure Engineer- (AWS) Amazon Web Services

At Anaplan we are a team of innovators focused on optimizing business decision-making through our leading AI-infused scenario planning and analysis platform so our customers can outpace their competition and the market.
What unites Anaplanners across teams and geographies is our collective commitment to our customers success and to our Winning Culture.
Coca-Cola LinkedIn Adobe LVMH and Bayer are just a few of the 2400 global companies who rely on our best-in-class platform.
We champion diversity of thought and ideas we behave like leaders regardless of title we are committed to achieving ambitious goals and we love celebrating our wins big and small.
Senior Infrastructure Engineer Certificate Management
As a Senior Infrastructure Services Engineer specialising in Certificate Management you will play a key role in designing operating and evolving our enterprise certificate management platform. This platform supports thousands of certificates across a global multi-cloud and on-premise environment.
You will focus on building a scalable automated and sustainable certificate management capability that enables service teams to manage their certificates through self-service workflows while ensuring strong governance security and visibility across the organisation.
Working closely with domain architecture security and platform teams you will help define and implement the future state of certificate lifecycle management automation and observability.
The long-term objective of this role is to minimise manual certificate operations by engineering automation self-service capabilities and platform integrations that allow service teams to securely manage certificate lifecycles at scale.
Engineer automation that enables scalable and sustainable certificate operations across thousands of certificates in multi-cloud and on-prem environments.
Implement certificate discovery and inventory capabilities to ensure full visibility of certificates deployed across the environment.
Build supporting automation and integrations using scripting and infrastructure-as-code tools such as Python Terraform and Ansible.
Enable service teams to manage certificates through federated self-service capabilities while maintaining central governance and policy enforcement.
Integrate certificate lifecycle monitoring into the organisations observability stack.
Troubleshoot and resolve complex certificate lifecycle issues and drive improvements that reduce manual operational effort.
Validate certificate signing requests and TLS certificate contents using tools such as openssl to ensure compliance with modern certificate standards and prevent issuance errors.
5 years of experience working in infrastructure engineering platform engineering or site reliability roles.
Experience operating or integrating with enterprise certificate management platforms.
Experience developing automation and integrations using scripting or programming languages such as Python or similar.
Practical experience automating infrastructure or operational workflows using tools such as Terraform Ansible or comparable automation frameworks.
Experience working in distributed infrastructure environments spanning cloud and on-premise platforms.
Experience collaborating with cross-functional teams including security platform engineering and service owners.
Bachelors degree in Computer Science Engineering or equivalent practical experience.
Experience working with certificate lifecycle management platforms such as AppViewX Sectigo or CyberArk.
Experience integrating with public certificate authorities such as DigiCert Lets or GlobalSign.
Experience implementing automated certificate lifecycle workflows using protocols such as ACME EST (Enrollment over Secure Transport) or SCEP (Simple Certificate Enrollment Protocol).
Experience managing distributed certificate authorities certificate revocation lists (CRLs) and Online Certificate Status Protocol (OCSP) services.
Experience with private certificate authorities such as AWS Private CA HashiCorp Vault CA or Microsoft Certificate Services.
Experience with observability platforms such as Prometheus Grafana Splunk or ElasticSearch/OpenSearch.
Experience supporting infrastructure across multi-cloud and on-premise environments.
Experience working with containers and container orchestration platforms such as Kubernetes.
Working knowledge of Linux systems and operating environments.
Experience validating certificate signing requests and certificate metadata using tools such as openssl.
Our Commitment to Diversity Equity Inclusionand Belonging (DEIB)
We believe attracting and retaining the best talent and fostering an inclusive culture strengthens our business. Build your career in a place where diversity equity inclusion and belonging arent just words on paper this is what drives our innovation its how we connect and it contributes to what makes us a market leader. We believe in a hiring and working environment where all people are respected and valued regardless of gender identity or expression sexual orientation religion ethnicity age neurodiversity disability status citizenship or any other aspect which makes people unique. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process perform essential job functions and receive equitable benefits and all privileges of employment. Please contact us to request accommodation.
Fraud Recruitment Disclaimer
It has come to our attention that fraudulent and fictitious job opportunities are being circulated on the Internet. Prospective candidates are being contacted by certain individuals mainly through telephone calls emails and correspondence claiming they are representatives of Anaplan. Extend offers to candidates without an extensive interview process with a member of our recruitment team and a hiring manager via video or in person.
Should you have any doubts about the authenticity of an email letter or telephone communication purportedly from for or on behalf of Anaplan please send an email to before taking any further action in relation to the correspondence.

Required Experience: