Certificate Management (PKI) Engineer

Vantive: A New Company Built On Our Legacy

Baxter is on a journey to separate our ~$5B Kidney Care segment into a standalone company. Vantive* will build on our nearly 70-year legacy in acute therapies and home and in-center dialysis to provide best-in-class care to the people we serve. We believe Vantive will not only build our leadership in the kidney care space, it will also offer meaningful work to those who join us.

At Vantive, you will become part of a community of people who are focused, courageous and don’t settle for the mediocre. Each of us are driven to help improve patients’ lives worldwide. Join us as we revolutionize kidney care and other vital organ support.

*Completion of the proposed separation of Kidney Care from Baxter into a standalone company (to be named Vantive) remains subject to the satisfaction of customary conditions.

Your role at Baxter

As a Certificate Management (PKI) Engineer, you will play a critical role in ensuring the security and integrity of digital communications within an organization. You will be responsible for managing the lifecycle of digital certificates, including issuance, renewal, revocation, and auditing. Your expertise will be crucial in maintaining compliance with industry standards and best practices related to cryptographic protocols and certificate management.

What you'll be doing

Certificate Lifecycle Management:

• Oversee the issuance, renewal, and revocation of digital certificates.

• Implement and maintain processes for managing certificate requests, approvals, and deployments.

• Monitor certificate expiration dates and ensure timely renewal to prevent service disruptions.

• Maintain an accurate inventory of all certificates deployed across systems and applications.

Security Compliance:

• Stay updated on industry standards, regulations, and best practices related to cryptographic protocols and certificate management.

• Ensure compliance with regulatory requirements such as PCI DSS, HIPAA, GDPR, and others relevant to certificate management.

• Collaborate with compliance and audit teams to facilitate certificate-related audits and assessments.

Certificate Infrastructure Management:

•  Configure and maintain certificate authorities (CAs) and registration authorities (RAs) to support secure certificate issuance and management.

• Monitor the health and performance of certificate infrastructure components.

• Troubleshoot issues related to certificate provisioning, validation, and revocation.

Cryptographic Security:

• Implement strong cryptographic algorithms and key management practices to safeguard digital certificates.

• Evaluate cryptographic vulnerabilities and recommend mitigation strategies.

• Collaborate with security teams to integrate certificate management with broader security initiatives.

Documentation and Reporting:

• Maintain comprehensive documentation of certificate management processes, procedures, and configurations.

• Generate regular reports on certificate usage, expiration status, and compliance metrics for stakeholders.

Collaboration and Communication:

• Collaborate with system administrators, network engineers, developers, and other stakeholders to integrate certificate management into various systems and applications.

• Communicate effectively with internal teams and external vendors to resolve certificate-related issues and implement enhancements.

What you'll bring

• Bachelor's degree in Computer Science, Information Technology, or related field.

• Proven experience in managing digital certificates in enterprise environments.

• 2+ years of experience with certificate management tools and platforms (e.g., OpenSSL, Microsoft Certificate Services, Hashicorp Vault).

• Strong understanding of cryptographic concepts, PKI (Public Key Infrastructure), and certificate management protocols (e.g., X.509, SSL/TLS).

• Knowledge of security standards and compliance frameworks (e.g., NIST, ISO 27001, SOC 2).

• Excellent problem-solving skills and attention to detail.

• Effective communication and collaboration abilities.

• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Security Manager (CISA) are a plus.

Reasonable Accommodations

Baxter is committed to working with and providing reasonable accommodations to individuals with disabilities globally. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application or interview process, please click on the link here and let us know the nature of your request along with your contact information.

Recruitment Fraud Notice

Baxter has discovered incidents of employment scams, where fraudulent parties pose as Baxter employees, recruiters, or other agents, and engage with online job seekers in an attempt to steal personal and/or financial information. To learn how you can protect yourself, review our Recruitment Fraud Notice.