At Finastra, we’re a global leader in financial services software, dedicated to expanding access to financial services and shaping what’s next for the industry. Our technology powers mission‑critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world’s top 50 banks, in more than 110 countries.
Reporting to the Manager, Infrastructure & System Operations, the Senior Engineer - Certificate Management & Platform Operations will possess hands-on experience with the administration, configuration, automation, and support of Venafi Certificate Management Platform and Public Key Infrastructure (PKI) Services and will be responsible for the maintenance, development, governance, and day-to-day operations of the enterprise certificate management ecosystem.
The candidate should have experience working in a diverse enterprise technology environment supporting critical security and infrastructure services and will provide technical leadership, engineering expertise, and strategic guidance in designing, implementing, automating, and supporting Venafi and enterprise certificate management solutions while aligning with industry best practices, security standards, compliance requirements, and operational excellence objectives.
The role will also be responsible for researching, planning, coordinating, and implementing automation, platform enhancement, governance, and modernization initiatives that improve service reliability, scalability, security, and operational efficiency.
Responsibilities & Deliverables
Your deliverables as a Senior Engineer - Certificate Management & Platform Operations will include, but are not limited to, the following:
- Own and manage the complete certificate lifecycle including issuance, renewal, replacement, revocation, discovery, deployment, and retirement of enterprise certificates.
- Administer, configure, maintain, and continuously improve the Venafi Certificate Management Platform, associated PKI services, and related integrations.
- Design, develop, and implement automation solutions using PowerShell, Python, APIs, and workflow automation tools to improve efficiency and reduce manual intervention.
- Collaborate with Infrastructure, Network, Security, Cloud, Application, and DevOps teams to deliver secure, scalable, and compliant certificate management services.
- Participate in the full service lifecycle including requirements gathering, design, implementation, testing, deployment, operational support, and continuous improvement.
- Develop and maintain technical standards, operational procedures, governance controls, and knowledge documentation for certificate management services.
- Support cloud-based certificate management solutions across Azure, AWS, Kubernetes, and modern application environments.
- Monitor certificate health, availability, compliance posture, and service performance while proactively identifying and mitigating operational risks.
- Lead troubleshooting and resolution of certificate-related incidents, service interruptions, and platform issues, including participation in Major Incident Management activities.
- Conduct root cause analysis and implement corrective and preventive actions to eliminate recurring issues and improve service resilience.
- Support internal audits, external audits, regulatory reviews, and security assessments by providing audit evidence and compliance reporting.
- Develop dashboards, KPIs, service metrics, and executive reporting to demonstrate service health, operational effectiveness, and risk reduction.
- Participate in Change Management, Problem Management, Incident Management, and Service Request Management processes in alignment with ITIL best practices.
- Evaluate new technologies, platform capabilities, and industry trends to support Finastra's certificate management roadmap and modernization strategy.
- Drive self-service capabilities, platform integrations, and automation opportunities to increase service maturity and customer experience.
- Maintain production and non-production environments while ensuring platform stability, security, and compliance.
- Mentor junior engineers and contribute to capability development, knowledge sharing, and operational excellence initiatives across the team.
Education
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or related discipline.
Required Experience
- 5+ years of hands-on experience supporting Enterprise Certificate Management Platforms, PKI Services, or Cybersecurity Infrastructure Platforms.
- 3+ years of hands-on experience administering and supporting Venafi Certificate Management Platform or similar enterprise certificate management solutions.
- Strong understanding of SSL/TLS certificates, Public Key Infrastructure (PKI), cryptography fundamentals, and certificate governance practices.
- Experience supporting business-critical enterprise applications in large-scale global environments.
- ITIL Foundation Certification or equivalent experience in Service Operations, Incident, Change, Problem, and Release Management processes.
Behavioral Competencies
- Demonstrates strong ownership and accountability.
- Automation-first and continuous improvement mindset.
- Strong analytical and problem-solving abilities.
- Excellent stakeholder management and communication skills.
- Ability to operate effectively in high-pressure environments.
- Customer-focused with a commitment to operational excellence.
- Strong governance, compliance, and risk awareness.
We are proud to offer a range of incentives to our employees worldwide. These benefits are available to everyone, regardless of grade, and reflect the values we stand for:
Flexibility: Enjoy unlimited vacation, subject to local regulations and business priorities. Benefit from hybrid working arrangements and inclusive policies such as paid time off for voting, bereavement, and sick leave.
Well‑being: Access confidential one‑to‑one support through our Employee Assistance Program, connect with our network of Wellbeing Champions and Gather Groups, and take part in monthly events and initiatives designed to help you thrive—inside and outside of work.
Health & Financial Security: Medical, life and disability insurance, retirement plans, lifestyle, and other benefits.*
Sustainability: Paid time off for volunteering and donation‑matching opportunities to support causes that matter to you.
Inclusion: Get involved in our inclusion communities, such as Count Me In, Culture@Finastra, Proud@Finastra, Disabilities@Finastra, and Women@Finastra—open to everyone who wants to participate and contribute.
Career Development: Access online learning and accredited courses through our Skills & Career Navigator tool.
Recognition: Take part in our global recognition program, Finastra Celebrates, and share your voice through regular employee surveys that help shape our culture and ways of working.
*Specific benefits may vary by location.
At Finastra, each individual is unique—bringing their own ideas, perspectives, cultural backgrounds, and experiences. We learn from one another, value what makes us different, and create an environment where everyone feels included, supported, and able to be their authentic selves.
Be unique. Be exceptional. Help us make a difference at Finastra.
Skills Required
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related discipline
- 5+ years of hands-on experience supporting enterprise certificate management platforms, PKI services, or cybersecurity infrastructure platforms
- 3+ years of hands-on experience administering and supporting Venafi Certificate Management Platform or similar enterprise certificate management solutions
- Strong understanding of SSL/TLS certificates, Public Key Infrastructure, cryptography fundamentals, and certificate governance practices
- Experience supporting business-critical enterprise applications in large-scale global environments
- ITIL Foundation Certification or equivalent experience in service operations, incident, change, problem, and release management processes
Finastra Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Finastra and has not been reviewed or approved by Finastra.
-
Leave & Time Off Breadth — Leave is positioned as flexible/“unlimited” in many roles, which can support work-life balance when team norms allow it. Hybrid/flexible working is also framed as a core part of the overall rewards experience.
-
Parental & Family Support — Parental leave is described as relatively generous in the US, with multiple references to roughly three months (or around 12 weeks) fully paid and equal leave for mothers and fathers. This is repeatedly highlighted as a meaningful component of the benefits package.
-
Wellbeing & Lifestyle Benefits — Wellbeing support is emphasized through offerings like an Employee Assistance Program and TaskHuman coaching, alongside volunteering time off and employee networks. These programs broaden total rewards beyond cash compensation.
Finastra Insights
What We Do
At Finastra our purpose is to unlock the power of finance for everyone & redefine finance for good. We’re the orchestrator of open finance; building and delivering innovative, next-generation technology on our open Fusion software architecture and cloud ecosystem. We’re one of the world’s largest FinTechs, working with over 9,000 customers including 90 of the top 100 banks globally. We’re creating a pioneering open platform that’s disrupting the financial industry, changing how financial software is developed and used. We believe in collaboration for innovation, to unlock the potential of people, businesses and communities. We have an unmatched portfolio of financial software and deliver mission critical solutions for financial institutions of all sizes, on premises or in the cloud. Our open architecture and platform approach embrace a wide ecosystem of partners and co innovators. Together we're leading the way in which applications are written, deployed and consumed in the world of financial services. Our people mission is to be the most loved and inclusive fintech company in the world; a mission we take seriously. DE&I factors into everything we do and every decision we make as a business. When you join Finastra, you open up a world of possibilities. With us, you can supercharge financial institutions, big tech and fintech while also building a more inclusive finance industry. We believe our people thrive when given the opportunity to be their authentic selves and we trust our people to work how, when and where they want; this is OPENworking. Our 2+ policy provides the perfect mix of focused work at home, coupled with the meaningful connection that comes from in person collaboration, coaching and community. We're rolling out a new programme where our people take as much leave as they need; we do not count vacation days and we trust our people to work in a way that suits them, when it suits them. Come join the future of Fintech, and make your world. OPEN.
