Lead Platform Engineer (CI/CD, PKI & Hybrid Cloud Automation)

TransUnion's Job Applicant Privacy Notice

What We'll Bring:

We are seeking a Senior Developer with 7+ years of experience to accelerate engineering throughput by building automation-first platforms, improving CI/CD and release reliability, and enabling secure self-service capabilities across hybrid cloud environments. The ideal candidate is hands-on with scripting, pipeline engineering, and secure automation, including PKI and certificate lifecycle automation, and thrives collaborating across engineering, security, and operations teams.

What You'll Bring:

We are seeking a Senior Developer with 7+ years of experience to accelerate engineering throughput by building automation-first platforms, improving CI/CD and release reliability, and enabling secure self-service capabilities across hybrid cloud environments. The ideal candidate is hands-on with scripting, pipeline engineering, and secure automation, including PKI and certificate lifecycle automation, and thrives collaborating across engineering, security, and operations teams.

What You’ll Do (Key Responsibilities)

1) Developer Velocity & Pipeline Automation

• Design and implement automation to reduce manual effort, accelerate delivery, and minimize errors across engineering workflows.
• Build and enhance CI/CD pipelines and automation frameworks that improve build/test/release speed and consistency.
• Establish engineering “paved roads” (templates, golden pipelines, reusable modules) and drive adoption through enablement and documentation

2) Hybrid Cloud Automation

• Define and implement automation strategies for hybrid cloud infrastructure components, including resource provisioning and lifecycle management.
• Build secure and governed self-service workflows/portals that allow teams to provision resources quickly within organizational guardrails.
• Leverage containers and orchestration platforms (e.g., Kubernetes) to deliver scalable automation capabilities.

3) PKI / Certificate Lifecycle Automation

• Implement automation for PKI and certificate lifecycle management (issuance, renewal, deployment, rotation) as part of broader hybrid cloud automation.
• Administer and automate certificate operations across enterprise tooling and workflows (e.g., workflow design, integrations, policy-driven automation).
• Troubleshoot end-to-end certificate flows and perform root cause analysis for failed issuance/renewals across CA/CLM/HSM components.

4) Security, Compliance, and Governance

• Ensure automation solutions align with security and compliance best practices, including access control and consistent certificate practices.
• Apply PKI standards and help enforce policy and compliance expectations in automated workflows.

5) Technical Leadership & Cross-Team Collaboration

• Act as a senior technical contributor/lead, collaborating across multiple teams to translate requirements into scalable automation solutions.
• Drive continuous improvement by identifying automation opportunities and delivering a pragmatic roadmap.

Required Qualifications

• 7+ years in software engineering, platform engineering, DevOps, or automation-focused roles.
• Strong scripting and automation skills (e.g., Python, PowerShell, Bash) and ability to build maintainable tooling.
• Proven experience building and operating CI/CD pipelines and automation frameworks.
• Hands-on experience with hybrid cloud automation: provisioning, lifecycle management, and self-service enablement.
• Practical understanding of PKI and certificate lifecycle management and ability to automate certificate operations at scale.
• Experience working across security/engineering/ops stakeholders to deliver secure-by-default automation.

Preferred / Nice-to-Have

• Strong software design & development background (OO design, API design, building reusable services/libraries). (Nice-to-have per your ask; not required.)
• Experience with Infrastructure as Code (e.g., Terraform) and configuration management.
• Experience with Kubernetes ecosystem and delivery patterns for platform automation.
• PKI depth in one or more of:
  • Microsoft ADCS (templates, CRL/OCSP, enrollment, subordinate CAs)
  • HSM operations (key generation, partitioning, PKCS#11 integrations)
  • Cryptography/TLS concepts (RSA/ECC, mTLS, CSR signing flows)
• Familiarity with ACME automation and/or certificate rotation patterns for containers/Kubernetes.

Impact You'll Make:

Core Competencies (What Success Looks Like)

• Measurably improved engineering lead time and deployment frequency via pipeline and workflow automation.
• Reduced manual toil and incident rate through standardized, repeatable automation.
• Secure, compliant certificate automation that scales across hybrid cloud services.
• Clear documentation, reusable modules, and strong enablement that drives adoption across teams.

#LI-MR1

This is a remote position which may require occasional in-person attendance at work-related events at the discretion of management.

TransUnion Job Title

Lead Developer, Software Development