Principal - IAM Advanced Authentication

About the role

The Principal Engineer is a senior individual contributor responsible for designing, building, automating and improving GSK’s enterprise certificate services. Reporting to the Lead, PKI, the role translates approved architecture, security standards and service priorities into secure, resilient production capabilities; makes day-to-day engineering decisions within those guardrails; and serves as a technical escalation point for complex PKI issues.

What you'll do

• Design, build, configure and maintain enterprise certificate authority and registration authority services
• Engineer secure certificate issuance, renewal, revocation and recovery processes for users, devices, applications and workloads
• Automate certificate discovery, inventory, issuance, renewal, revocation and reporting using APIs, scripting
• Integrate PKI with Microsoft and Linux platforms, network and security devices, cloud services, DevOps pipelines, applications, mobile and endpoint management platforms
• Implement certificate profiles, templates and policy controls in line with approved architecture, Certificate Policy and Certification Practice Statement requirements

What you need

• 5–9 yrs of experience
• IAM
• Linux
• Python
• Active Directory
• Terraform
• Risk management
• Any graduate

Good to have

• Cloud security
• Azure
• AWS
• GCP
• REST APIs
• PowerShell