diff --git a/CHANGELOG.md b/CHANGELOG.md
index 46240efb7..936a9fe11 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -52,6 +52,7 @@
   [#259](https://github.com/Kong/gateway-operator/pull/259)
 - Default version of `ControlPlane` is bumped to 3.2.0
   [#327](https://github.com/Kong/gateway-operator/pull/327)
+- Webhook certificate Jobs now set `TTLSecondsAfterFinished=60` to clean up after they have finished.
 
 ### Fixes
 
diff --git a/pkg/utils/kubernetes/resources/jobs.go b/pkg/utils/kubernetes/resources/jobs.go
index 41261f195..bcc3c7f70 100644
--- a/pkg/utils/kubernetes/resources/jobs.go
+++ b/pkg/utils/kubernetes/resources/jobs.go
@@ -75,6 +75,7 @@ func newWebhookCertificateConfigJobCommon(namespace, serviceAccountName string,
 			Namespace: namespace,
 		},
 		Spec: batchv1.JobSpec{
+			TTLSecondsAfterFinished: lo.ToPtr(int32(60)),
 			Template: corev1.PodTemplateSpec{
 				Spec: corev1.PodSpec{
 					RestartPolicy:      corev1.RestartPolicyOnFailure,