Security Engineer

We are seeking an experienced Global Infrastructure Security Engineer (3rd Line Support) to maintain, operate, and develop datacenter, cloud, and SaaS environments supporting global public DNS and certificate-related services. The ideal candidate will have strong expertise in Public Key Infrastructure (PKI), cryptographic concepts, certificate lifecycle management, public DNS infrastructure, and security operations within a global enterprise environment. Key Responsibilities Infrastructure and Service Management

• Manage and maintain global public DNS infrastructure, public certificates, code-signing certificates, and URL redirection services.
• Operate and maintain datacenter, cloud, and SaaS environments supporting global services.
• Manage certificate lifecycles and code-signing infrastructure, ensuring security and service availability.
• Support connectivity and integration with networking, load balancing, reverse proxy, and web services.
• Ensure service delivery meets global business requirements and agreed service-level agreements (SLAs).

Project and Service Development

• Implement new service requirements and improve existing services.
• Participate in international DNS cleanup initiatives across the organization.
• Evaluate technical feasibility, define implementation strategies, and establish functional requirements.
• Coordinate service-related testing environments and validate new functionalities with key users.
• Define delivery timelines, estimate costs, and coordinate service implementation.
• Develop and improve IT Service Management (ITSM) processes to support service delivery and integration.
• Manage service-related data and documentation to support business requirements.

Technical Support and Stakeholder Management

• Act as a subject matter expert for global DNS and certificate services.
• Provide advanced third-line technical support and troubleshoot complex infrastructure and security issues.
• Develop technical reference documentation to educate internal teams and customers.
• Communicate service updates to stakeholders and gather feedback for continuous improvement.
• Respond to technical queries related to DNS, certificates, and associated infrastructure.
• Support ongoing global DNS cleanup and infrastructure improvement initiatives.

Required Technical Skills and Experience

• Strong understanding of Public Key Infrastructure (PKI), cryptography, key management mechanisms, and related technologies such as Active Directory Certificate Services (AD CS).
• Hands-on experience with OpenSSL and ACME toolkits.
• Practical scripting experience using Bash, PowerShell, and Python.
• Experience with DNS troubleshooting and diagnostic tools, including nslookup and dig.
• Strong understanding of public DNS management, digital certificates, and certificate lifecycle operations.
• Knowledge of global IT operations, infrastructure security, and enterprise environments.
• Familiarity with ITSM tools, processes, and service management practices.
• Understanding of networking, load balancing, reverse proxies, and web services.
• Experience in technical troubleshooting, service development, documentation, and stakeholder coordination.