diff --git a/deployment/zitadel/cert-job.yaml b/deployment/zitadel/cert-job.yaml
index f6463fa..f5409f6 100644
--- a/deployment/zitadel/cert-job.yaml
+++ b/deployment/zitadel/cert-job.yaml
@@ -3,7 +3,8 @@ kind: ServiceAccount
 metadata:
   name: zitadel-cert-creator
   annotations: 
-    argocd.argoproj.io/hook: PreSync
+    argocd.argoproj.io/hook: Sync
+    argocd.argoproj.io/sync-wave: "2"
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
@@ -19,7 +20,8 @@ kind: RoleBinding
 metadata:
   name: zitadel-cert-creator
   annotations: 
-    argocd.argoproj.io/hook: PreSync
+    argocd.argoproj.io/hook: Sync
+    argocd.argoproj.io/sync-wave: "2"
 subjects:
   - kind: ServiceAccount
     name:  zitadel-cert-creator
@@ -33,7 +35,8 @@ kind: Job
 metadata:
   name: create-zitadel-cert
   annotations: 
-    argocd.argoproj.io/hook: PreSync
+    argocd.argoproj.io/hook: Sync
+    argocd.argoproj.io/sync-wave: "2"
 spec:
   template:
     spec: