Public Key Infrastructure Experts in Munich
, matched quickly with vetted, available freelancersHire experts who design certificate authorities, automate certificate lifecycles and secure identity for connected systems, with precise AI matching to vetted, available freelancers who can start quickly.
Meet FRATCH Experts in Munich, who have recently used Public Key Infrastructure
Ales L.
Last position:
Senior DevOps Consultant (Freelance) at European Union Agency (via IBM)
- Worked as freelance Senior DevOps Consultant on-site for IBM at a European Union Agency, operating in a highly secure, air-gapped environment managing classified systems.
- Led automation and DevOps initiatives for a large-scale OpenShift platform (>400 nodes), driving deployment efficiency, GitOps adoption, and operational automation using Ansible, Python, and Bash while ensuring compliance with security requirements.
- Spearheaded automation of release and deployment workflows in a private cloud environment hosting 400+ OpenShift nodes, significantly improving deployment speed and reliability.
- Migrated existing playbooks, roles, and templates from Ansible Tower to Ansible Automation Platform (AAP), ensuring full compliance with fully-qualified collection names (FQCN) and preparing custom Execution Environments (EE) for containerized automation.
- Implemented GitOps Agent for AAP Controller Configuration as Code, enabling automated synchronization (CRUD) of Ansible Controller objects based on repository-stored configuration definitions using GitHub webhooks.
- Designed and automated complex multi-step operational workflows including environment cleanup, Helix cluster component re-creation, Kafka topic management, and OpenShift object lifecycle management across ~100 environments.
- Achieved a reduction of multi-day manual operations to under a few hours through automation improvements spanning multiple AAP clusters and OpenShift environments.
- Integrated Ansible Automation Platform with Thycotic (Delinea) Secret Server via lookup plugin to enhance secure credential management in automated processes.
- Managed deployment tasks, platform troubleshooting, and Istio network configurations while adhering to stringent EU PSC security and compliance standards.
- Collaborated with infrastructure and application teams to refine deployment procedures, develop naming conventions, and continuously improve automation coverage in an air-gapped, classified environment.
Mohamad D.
Last position:
DevOps Engineer & IT-Security-Architect at BMW Group
- Set up Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
- Developed Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
- Hardened CI/CD pipelines using Jenkins, SonarQube, Fortify SSC, and Contrast AST
- Integrated SAP BTP/Kyma and ServiceNow GRC
André H.
Last position:
Linux IT Admin at ReiserST
- Development and maintenance of IT architectures with embedded Linux systems.
- Designing, implementing, and optimizing backend applications and script-based solutions.
- Analyzing and resolving issues, including troubleshooting and user support.
- Developing and implementing security concepts for cloud solutions.
- Administering networks (DHCP, DNS, NTP, VPN).
- Technologies: Linux, PowerShell, Bash, Python, Ansible, Kubernetes, GitLab CI.
- Methods: Kanban.
Weronika S.
Last position:
Business & Integration Architecture Specialist at Accenture Technology Solution GmbH
Understanding of bank’s fundamentals throughout analysis and writing specifications
Deep analysis of security measurements to be transferred into new environment
Process design and optimization
Collecting requirements from different areas and processing them into agreement documentation, concepts and process description for internal and external partners
Analysis of data delivery sources and transformation of relevant functions into new environment
Analysis and prioritisation of value and benefits resulting from introducing smart data tools
Mapping and migrating data within Power BI upgrade
Change management support and evaluation
Marketing automation and technology enablement
Executing test and release support
Creating training documentation for the client’s employees to understand value and benefits by using new technologies when acquiring new or creating benefits to their existing customers
Creating a complete database of existing firewalls supporting the security of the client’s infrastructure
Migration and re-architecture of reporting systems from multiple data sources into the cloud environment
Tobias W.
Last position:
External Contractor at Government Agency
- Project support for VMware/Active Directory
- Operational support for administration, process execution
- Creation and review of documentation
- Active Directory, Powershell, VMware VSphere 7, Confluence, Jira
- Windows Server 2016/2019/2022/2025 GUI/Core
- Concept and rollout of Windows Update Services (approx. 500 client/server systems) and takeover of a central WSUS gateway company-wide
- Takeover and redesign KMS/RDS systems company-wide
Gilbert L.
Last position:
Cyber Security Expert at TüV Süd AG (via Sthree GmbH)
- Security analysis of alerts
- Further development of the security operations center
- Development of processes and workflows in the security environment
- Implementation of SOC solutions
- Forensic expertise
- Conducting hunts
- Vulnerability scans and proof of concepts
- Risk assessments and risk analyses
- Maintenance and further development of the Tenable.sc ScanCenter environment
Rupesh K.
Last position:
IT Baseline Compliance Consultant at Consultant
- Baseline compliance verification against MAS audit findings
- Building technical architecture concept for 30 technologies to build hardening standard artifacts
- Identifying and building automation possibilities for given technologies based on CIS
- Building the standard baseline configuration based on internal security standard
- Responsible for building Cloud Native Application Protection Platform (CNAPP) architecture artifacts based on Azure cloud platform
- Responsible for RFQ and RFP for different CNAPP solutions (Qualys Total Cloud, CrowdStrike, Azure Security Center)
- Supporting compliance verification and validation via automated scripts for a sample population of IT devices and instances
- Responsible for complete vulnerability management lifecycle using Nexpose, remediation, reporting and integration of results with Splunk, HPSM and Tableau
- Audit support for MAS
Volker J.
Last position:
Interim CISO (Germany, Austria, US, APAC), Auditor at Vetter Pharma-Fertigung GmbH & Co. KG
- Planned and initiated BIA/BCM assessment to identify risk mitigation measures and process optimization, and provide risk transparency to the general management
- Evaluated KRITIS/NIS-2 status and implemented requirements
- Created comprehensive digital roadmap and ISO 27001/NIS-2/Data Privacy KRITIS roadmap
- Enhanced crisis management process and documentation
- Integrated information security clauses into customer and supplier contracts to ensure compliance with internal and regulatory requirements
- Ensured organizational readiness for audits by the Landesbehörde für Aufsicht (LBA) and supported audit processes
- Improved asset management processes and classification of sensitive data to strengthen overall security
- Planned and ordered regular penetration tests (internal, external) to identify vulnerabilities and improve security measures
- Performed compliance checks against EU CER requirements and reporting
- Created management status and risk reports to ensure transparent communication of risks and security posture
- Managed registration with the German Federal Office for Information Security (BSI) and provided ongoing status updates
- Conducted risk assessment of supply chain, enhanced evaluation and reporting processes
- Improved IT/OT network segmentation to enhance security and reduce potential audit risks
- Strengthened cyber resilience by proactive measures and enhanced security frameworks and KPI reporting
- Onboarded SIEM/SOC/EDR to improve cybersecurity monitoring and response
- Planned and conducted awareness trainings for employees, administrators, and management
- Enhanced incident reporting processes to ensure timely and accurate reporting of cybersecurity events
- Created AI policy in cooperation with the Legal department to secure use and governance of Artificial Intelligence within the organization
- Scoped and implemented ISO 27001:2022 requirements as part of the Information Security Management System
- Served as interim InfoSec team lead
- Introduced information security to global KAM and Sales organization
- Improved admission and access management including privileged access
- Conducted internal audits in collaboration with internal audit department
Konstantinos M.
Last position:
IT System Engineer at Client belongs to critical infrastructure
- IT infrastructure services
- IT services, networks, Exchange, Office 365 & 2016
- IT documentation
- Collaboration with external partner & managed provider
- Stakeholder management
Sebastian B.
Last position:
AZ-104 Microsoft Azure Administrator at Continuing Education
Dmytro G.
Last position:
Retraining (IT specialist for system integration) at Comcave
Discover over 15,000 top freelancers
Statistics of experts using Public Key Infrastructure
Aggregated from the professional profiles of matched freelancers.
Experience
20 years (Germany: 23 years)
Position duration
1.1 years (Germany: 1.7 years)
Positions per freelancer
15 (Germany: 18)
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Government and Administration, Automotive
Certification focus areas
Information Technology, Project Management, Finance
Bachelor's degree or higher
86% (Germany: 80%)
Master's degree or higher
43% (Germany: 54%)
Certifications per freelancer
4 (Germany: 5)
Most common languages
German, English, French
Speak two or more languages
100% (Germany: 99%)
Based on our profile pool as of 19 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Munich are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Munich using Public Key Infrastructure
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 19 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Public Key Infrastructure experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Government and Administration (64%)
- Automotive (55%)
- Healthcare (55%)
- Manufacturing (55%)
- Media and Entertainment (55%)
- Professional Services (55%)
- Banking and Finance (45%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Trust foundations
Public Key Infrastructure (PKI) creates trust for digital identities, encrypted communication and signed data. It combines public-key cryptography with certificates, certificate authorities, registration processes and policies. Companies use it to prove that a device, service, person or organisation is genuine before allowing access or accepting a signed transaction.
Core building blocks
A PKI environment usually includes a root certificate authority, issuing authorities, certificate stores and revocation services. Specialists work with X.509 certificates, certificate signing requests, key pairs, trust chains, OCSP and certificate revocation lists. They also define key protection, renewal, backup and recovery procedures so trust remains available and controlled.
Systems and use cases
Public Key Infrastructure supports security across internal and customer-facing systems:
- TLS certificates for websites, APIs and service-to-service traffic
- Device identity for industrial equipment, vehicles and IoT fleets
- Smart cards, employee certificates and secure remote access
- Code signing, document signing and software supply-chain controls
- Mutual TLS for microservices, networks and cloud workloads
It can run across data centres, cloud environments, embedded devices and hybrid estates.
Ecosystem and tooling
Experts may work with Microsoft Active Directory Certificate Services, OpenSSL, HashiCorp Vault, Smallstep, Java KeyStore, hardware security modules and cloud certificate services. Their work often connects PKI with Active Directory, IAM, zero-trust controls, Kubernetes, DevOps pipelines and endpoint management. Automation through APIs, policy engines and infrastructure-as-code reduces manual certificate handling.
When expertise matters
Companies bring in freelance specialists when certificates are expiring unpredictably, trust chains are inconsistent or a legacy certificate authority must be replaced. They also need support for mergers, cloud migration, device rollout, compliance projects and stronger workload identity. In Munich, collaboration may involve local manufacturing, automotive, finance or technology teams, with remote delivery and German or English communication depending on the organisation.
- Establish certificate policies and operating procedures
- Design a resilient CA hierarchy and key custody model
- Discover, renew and revoke certificates across estates
- Integrate signing and identity checks into delivery workflows
What strong experts deliver
Strong professionals treat PKI as an operational service, not just a cryptography project. They document trust boundaries, model failure and recovery scenarios, protect private keys and make ownership clear. They can explain certificate risk to security leaders while giving infrastructure teams usable automation, monitoring and runbooks. Quality shows in predictable renewal, tested revocation and traceable changes.
Frequently asked questions
Key details about Public Key Infrastructure, drawn from the questions we get asked most.
Public Key Infrastructure (PKI) is used to establish digital trust. It issues certificates for TLS, device identity, secure email, code signing, document signing, smart cards and mutual authentication between services.
Public Key Infrastructure uses asymmetric key pairs and certificates instead of one secret shared by many parties. That supports stronger identity verification, easier attribution and controlled revocation, although it requires disciplined certificate and key lifecycle management.
A strong PKI specialist often combines cryptography with IAM, Active Directory, TLS, networking, cloud security and secrets management. Experience with HSMs, OpenSSL, certificate automation, Kubernetes or DevOps pipelines is valuable when trust must operate across modern infrastructure.
Public Key Infrastructure (PKI) work can range from certificate discovery and renewal automation to CA redesign or a full migration. The right level of experience depends on the number of trust domains, legacy dependencies, key protection requirements and the impact of an outage.
PKI projects can often be delivered remotely through controlled access, documentation and scheduled workshops. On-site work in Munich may help with hardware security modules, restricted networks or device testing, while German and English communication needs should be agreed early.
Public Key Infrastructure commonly connects with Microsoft Active Directory Certificate Services, OpenSSL, HashiCorp Vault, Smallstep and cloud certificate services. It also integrates with IAM, endpoint management, Kubernetes, service meshes and hardware security modules.
Look for PKI designs with clear trust boundaries, documented policies, protected private keys and tested recovery procedures. A quality professional can demonstrate certificate inventory, renewal and revocation processes, audit trails and monitoring rather than presenting certificates as a one-time setup.
Public Key Infrastructure (PKI) migrations can fail when undocumented certificates, embedded trust anchors or unavailable private keys are overlooked. A careful specialist maps dependencies, runs parallel validation where appropriate, defines rollback steps and changes trust stores in a controlled sequence.
The average hourly rate of freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects is 107 €, which corresponds to a daily rate of about 857 € based on an 8-hour working day.
Of the freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects, 86% hold at least a Bachelor's degree and 43% hold at least a Master's degree.
On average, freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects have 20 years of professional experience, with a single engagement typically lasting around 1.1 years.
The most common languages among freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects are German (100%), English (100%), and French (18%).
The most common industries among freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects are Information Technology (100%), Government and Administration (64%), and Automotive (55%).
The most common business areas among freelancers in Munich, Germany who have used Public Key Infrastructure in their recent projects are Information Technology (100%), Project Management (91%), and Operations (82%).
Main locations of FRATCH Experts, who have recently used Public Key Infrastructure
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Hamburg 
Cologne 
Frankfurt 
Stuttgart Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
