Certificate & Secrets Management Engineer

Job Overview:

The Certificate Secrets Management Engineer is responsible for managing and securing the lifecycle of application certificates, client secrets, and service credentials across production and non-production environments. The role includes certificate renewals, client-secret rotation, expiry monitoring, inventory management, validation, and incident support to prevent authentication failures and service disruptions. The engineer will work with application, cloud, security, and integration teams to maintain secure credential-management processes, documentation, and operational runbooks

Key Role Responsibilities:

• Lead the end-to-end transition of enterprise certificates, client secrets, and application credentials from the current owner to the support team.
• Engage proactively with application owners, security teams, infrastructure teams, vendors, and business stakeholders to drive handover activities.
• Build and maintain a complete inventory of certificates, client secrets, expiry dates, owners, dependencies, and renewal or rotation requirements.
• Coordinate and lead certificate renewal and client-secret rotation activities, including 180-day rotation cycles, without impacting production services.
• Facilitate knowledge-transfer sessions, track open actions, resolve dependencies, and ensure clear ownership and operational readiness at transition completion.
• Plan, coordinate, and validate all changes across development, test, UAT, and production environments, including rollback and post-change verification.
• Create and maintain operational runbooks, SOPs, dashboards, trackers, risk logs, and executive-ready status reports.
• Act as the primary point of contact for stakeholders, lead governance calls, manage escalations, and drive initiatives through transition, hypercare, and steady-state support.