Lifecycle Management- TLS Engineer

Job Description

About Us Zelis is modernizing the healthcare financial experience in the United States (U.S.) across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts ? driving real, measurable results for clients. Why We Do What We Do In the U.S., consumers, payers, and providers face significant challenges throughout the healthcare financial journey. Zelis helps streamline the process by offering solutions that improve transparency, efficiency, and communication among all parties involved. By addressing the obstacles that patients face in accessing care, navigating the intricacies of insurance claims, and the logistical challenges healthcare providers encounter with processing payments, Zelis aims to create a more seamless and effective healthcare financial system. Zelis India plays a crucial role in this mission by supporting various initiatives that enhance the healthcare financial experience. The local team contributes to the development and implementation of innovative solutions, ensuring that technology and processes are optimized for efficiency and effectiveness. Beyond operational expertise, Zelis India cultivates a collaborative work culture, leadership development, and global exposure, creating a dynamic environment for professional growth. With hybrid work flexibility, comprehensive healthcare benefits, financial wellness programs, and cultural celebrations, we foster a?holistic workplace experience. Additionally, the team plays a vital role in maintaining high standards of service delivery and contributes to Zelis? award-winning culture.? Position Overview We are seeking a highly skilled and motivated Transport Layer Security (TLS) Engineer to join our Information Security team. The TLS Certificate Lifecycle Engineer will be responsible for the end-to-end management of TLS certificates across enterprise environments. This includes issuance, renewal, discovery, monitoring, and operational support of certificates using tools such as DigiCert, Entrust, Venafi, Sectigo, Active Directory and Amazon Web Services (AWS). This role ensures secure access to web-based applications, prevents outages due to expired certificates, and supports compliance with evolving industry standards such as the 45-day certificate validity cycle. The ideal candidate will have a solid understanding of TLS technologies and best practices, including certificate request methods and configuration in target applications. Additionally, this role requires collaboration with the broader Security Engineering team which oversees all security platforms across Zelis. Position Summary We are seeking a highly skilled and motivated Transport Layer Security (TLS) Engineer to join our Information Security team. The TLS Certificate Lifecycle Engineer will be responsible for the end-to-end management of TLS certificates across enterprise environments. This includes issuance, renewal, discovery, monitoring, and operational support of certificates using tools such as DigiCert, Entrust, Venafi, Sectigo, Active Directory and Amazon Web Services (AWS). This role ensures secure access to web-based applications, prevents outages due to expired certificates, and supports compliance with evolving industry standards such as the 45-day certificate validity cycle. The ideal candidate will have a solid understanding of TLS technologies and best practices, including certificate request methods and configuration in target applications. Additionally, this role requires collaboration with the broader Security Engineering team which oversees all security platforms across Zelis. Key Responsibilities Approve certificate requests and revoke, and retire TLS certificates using automated Certificate Manager tools Automate certificate discovery and renewal workflows across internal and external endpoints Maintain inventory of public and private certificates and ensure secure key management Monitor certificate expiration and proactively address renewal needs to prevent service disruptions Respond to certificate-related incidents and support root cause analysis Collaborate with application owners and infrastructure teams to ensure proper certificate deployment and integration Maintain detailed documentation of certificate processes, configurations, and lifecycle events Ensure compliance with internal security policies and external regulatory requirements Generate audit logs and reports for certificate management activities Required Qualifications Education: Bachelor?s degree in Computer Science, Information Technology, Cybersecurity, or a related field Experience: Minimum of 3 years of experience in TLS certificate management Technical Skills: Proficiency in TLS certificate tools and technologies Hands-on experience with Venafi, Sectigo, DigiCert, Entrust or similar certificate management platforms Strong understanding of cryptographic protocols (SSL/TLS, S/MIME, SSH), certificate authorities, and PKI infrastructure Excellent analytical and problem-solving skills Strong communication and teamwork abilities Desired Skills Experience with IAM and PAM tools such as Microsoft Azure, AWS, SailPoint, and CyberArk Analytical Skills: Strong problem-solving abilities and attention to detail. Communication Skills: Excellent verbal and written communication skills, with the ability to convey technical concepts to non-technical stakeholders. Project Management: Ability to manage multiple tasks and projects simultaneously, prioritize effectively, and meet deadlines.